Summary
This article contains information about the newnslog Transmission Control Protocol
(TCP) counters, SNMP OID of the counters, and its brief description.
TCP Counters
The following table lists the newnslog TCP counters with a simple description of the
counter and the SNMP OID.
Newnslog Counter
SNMP OID
tcp_tot_ServerOpen
tcpTotServerConnOpened
tcp_tot_ServerClosed
tcpTotServerConnClosed
tcp_tot_ClientOpen
tcpTotClientConnOpened
tcp_tot_ClientClosed
tcp_tot_syn
tcpTotClientConnClosed
tcpTotSyn
tcp_tot_syn_probe
tcpTotSynProbe
tcp_tot_fin_srvr
tcpTotSvrFin
tcp_tot_fin_clnt
tcpTotCltFin
tcp_tot_timeWaitToSy
n
tcpWaitToSyn
tcp_tot_timeWaitData
tcpWaitToData
Description
Server connections initiated
by the NetScaler appliance
after startup. This counter is
reset when the appliance
restarts.
Total number of closed
server connections
Client connections initiated
on the NetScaler appliance
after startup. This counter is
reset when the appliance
restarts.
Total number of closed
client connections
SYN packets received
Probes from the NetScaler
appliance to a server. The
appliance sends a SYN
packet to the server to
check its availability and
expects a SYN_ACK packet
from the server before a
specified response timeout.
FIN packets received from
the server.
FIN packets received from
the clients.
SYN packets received on
connections that are in the
TIME_WAIT state. Packets
cannot be transferred on a
connection in this state.
Bytes of data received on
connections that are in the
TIME_WAIT state. Data
cannot be transferred on a
connection that is in this
state.
tcp_tot_clnt_flushed
tcp_tot_srvr_flushed
tcp_tot_clnt_flushed_h
o
tcp_tot_srvr_flushed_h
o
tcp_tot_clnt_flushed_a
hc
tcp_tot_srvr_flushed_a
hc
tcp_tot_clnt_flushed_p
hc
tcp_tot_srvr_flushed_p
hc
tcp_err_badchecksum
s
Client connections that are
flushed because the client is
tcpTotZombieCltConnFlushed
idle for some time.
Server connections that are
flushed because there are
no client requests in the
tcpTotZombieSvrConnFlushed queue for some time.
Half-opened client
connections that are flushed
because the three-way
tcpTotZombieHalfOpenCltConn handshakes are not
Flushed
complete.
Half-opened server
connections that are flushed
because the three-way
tcpTotZombieHalfOpenSvrCon handshakes are not
nFlushed
complete.
Active half-closed client
connections that are flushed
because the client has
closed the connection and
tcpTotZombieActiveHalfCloseCl there is no activity on the
tConnFlushed
connection.
Active half-closed server
connections that are flushed
because the server has
closed the connection and
tcpTotZombieActiveHalfCloseS there is no activity on the
vrConnFlushed
connection.
Passive half-closed client
connections that are flushed
because the NetScaler
appliance has closed the
tcpTotZombiePassiveHalfClose connection and there is no
CltConnFlushed
activity on the connection.
Passive half-closed server
connections that are flushed
because the NetScaler
appliance has closed the
tcpTotZombiePassiveHalfClose connection and there is no
SrvConnFlushed
activity on the connection.
Packets received with a
tcpErrBadCheckSum
TCP checksum error.
tcp_err_syn_n_syn_rc
vd
tcpErrSynInSynRcvd
tcp_err_syn_n_est
tcpErrSynInEst
tcp_err_syn_giveups
tcpErrSynGiveUp
tcp_err_syn_sentbada
ck
tcpErrSynSentBadAck
tcp_err_syn_retransmit tcpErrSynRetry
tcp_err_fin_retransmit
tcpErrFinRetry
tcp_err_fin_giveups
tcpErrFinGiveUp
tcp_err_fin_dup
tcpErrFinDup
tcp_err_rst
tcpErrRst
tcp_err_rst_not_est
tcpErrRstNonEst
tcp_err_rst_outof_wnd
tcpErrRstOutOfWindow
tcp_err_rst_inTimewait
s
tcpErrRstInTimewait
SYN packets received on a
connection that is in the
SYN_RCVD state. A
connection goes into the
SYN_RCVD state after
receiving a SYN packet.
SYN packets received on a
connection that is in the
ESTABLISHED state. A
SYN packet is not expected
on an ESTABLISHED
connection.
Attempts to establish a
connection on the NetScaler
appliance that timed out.
Incorrect ACK packets
received on a connection
that is in the SYN_SENT
state. An incorrect ACK
packet is the third packet in
the three-way handshake
that has an incorrect
sequence number.
SYN packets resent to a
server.
FIN packets resent to a
server or a client.
Connections that were timed
out by the NetScaler
appliance because of not
receiving the ACK packet
after retransmitting the FIN
packet four times.
Number of duplicate FIN
packets received
Reset packets received from
a client or a server
Reset packets received on a
connection that is not in the
ESTABLISHED state
Reset packets received on a
connection that is out of the
current TCP Window
Reset packets received on a
connection that is in the
TIME_WAIT state. Packets
tcp_err_srvr_retransmi
t
tcpErrSvrRetrasmit
tcp_err_clnt_retransmit tcpErrCltRetrasmit
tcp_err_full_retransmit
tcp_err_partial_retrans
mit
tcp_err_srvr_out_of_or
der
tcp_err_clnt_out_of_or
der
tcpErrFullRetrasmit
tcpErrPartialRetrasmit
tcpErrSvrOutOfOrder
tcpErrCltOutOfOrder
tcp_err_hole_client
tcpErrCltHole
tcp_err_hole_server
tcp_err_cookie_pkt_se
tcpErrSvrHole
tcpErrCookiePktSeqReject
cannot be transferred on a
connection in the
TIME_WAIT state.
Packets retransmitted by a
server. This usually occurs
because the
acknowledgement from the
NetScaler appliance has not
reached the server.
Packets retransmitted by a
client. This usually occurs
because the
acknowledgement from the
NetScaler appliance has not
reached the client.
Full packets retransmitted
by the client or the server
Partial packet retransmits by
a client or server because of
congestion on the
connection. This usually
occurs because the Window
advertised by the NetScaler
appliance is not big enough
to hold the full packet.
Out of order TCP packets
received from a server.
Out of order TCP packets
received from a client.
TCP holes created on a
client connection. When out
of order packets are
received from a client, a
hole is created on the
NetScaler appliance for
each group of missing
packets.
TCP holes created on a
server connection. When
out of order packets are
received from a server, a
hole is created on the
NetScaler appliance for
each group of missing
packets.
SYN cookie packets
q_reject
tcp_err_cookie_signat
ure_reject
tcpErrCookiePktSigReject
tcp_err_cookie_pkt_se
q_drop
tcpErrCookiePktSeqDrop
tcp_err_cookie_mss
tcpErrCookiePktMssReject
tcp_err_retransmit
tcpErrRetransmit
tcp_err_retransmit_giv
eups
tcpErrRetransmitGiveUp
tcp_max_Clients
maxTcpConnections
tcp_max_ReqPerConn
maxReqPerConnection
rejected because they
contain an incorrect
sequence number.
SYN cookie packets
rejected because they
contain an incorrect
signature.
SYN cookie packets
dropped because the
sequence number specified
in the packets is outside the
current Window.
SYN cookie packets
rejected because the
maximum segment size
(MSS) specified in the
packets is incorrect.
TCP packets retransmitted.
The NetScaler appliance
attempts to retransmit the
packet up to seven times,
after which it resets the
other half of the TCP
connection.
The number of times the
NetScaler appliance
terminates a connection
after retransmitting the
packet seven times on that
connection.
The maximum number of
connections that can be
made from the system to the
Web server(s) attached to it.
This value is applied
globally to all attached
servers.
The maximum number of
requests that the system
can pass on a particular
connection between the
system and a server
attached to it. If the Value is
zero, then it allows an
unlimited number of
requests to be passed.
tcp_err_cip_alloc
tcp_tot_ClientOpen_R
ate
tcpErrCipAlloc
tcp_tot_acl_bridge
aclTotPktsBridged
tcp_tot_acl_drop
aclTotPktsDenied
tcp_tot_acl_allow
aclTotPktsAllowed
tcp_tot_acl_nat
tcp_tot_acl_hits
aclTotPktsNAT
aclTotHits
tcp_tot_acl_miss
aclTotMisses
tcp_tot_sacl_bridge
saclTotPktsBridged
tcp_tot_sacl_drop
saclTotPktsDenied
tcp_tot_sacl_allow
saclTotPktsAllowed
tcp_tot_sacl_hits
saclTotHits
tcp_tot_sacl_miss
saclTotMisses
tcp_tot_sacl_count
saclsCount
tcp_tot_sacl6_bridge
sacl6TotPktsBridged
tcpTotClientConnOpenRate
Number of times TCP level
client header insertion
failure
Rate at which connections
are opened in the system.
Packets matching a bridge
Access Control List (ACL),
which in transparent mode
bypasses service
processing.
Packets dropped because
they match ACLs with
processing mode set to
DENY.
Packets matching ACLs with
processing mode set to
ALLOW. NetScaler
appliance processes these
packets.
Packets matching a NAT
ACL, resulting in a NAT
session.
Packets matching an ACL.
Packets not matching any
ACL.
Total packets that matched
a SimpleACL with action
BRIDGE and got bridged by
NetScaler appliance.
Packets dropped because
they match Deny Simple
ACL.
Total packets that matched
a Simple ACL with action
ALLOW and got consumed
by NetScaler appliance.
Packets matching a simple
ACL.
Packets not matching any
simple ACL.
Number of simple ACLs
configured.
Total packets that matched
a SimpleACL6 with action
BRIDGE and got bridged by
NetScaler appliance.
tcp_tot_sacl6_drop
sacl6TotPktsDenied
tcp_tot_sacl6_allow
sacl6TotPktsAllowed
tcp_tot_sacl6_hits
sacl6TotHits
tcp_tot_sacl6_miss
sacl6TotMisses
tcp_tot_sacl6_count
sacl6sCount
tcp_tot_acl6_bridge
acl6TotPktsBridged
tcp_tot_acl6_drop
acl6TotPktsDenied
tcp_tot_acl6_allow
acl6TotPktsAllowed
tcp_tot_acl6_nat
acl6TotPktsNAT
tcp_tot_acl6_hits
acl6TotHits
tcp_tot_acl6_miss
acl6TotMisses
pbr_tot_allow
pbrTotPktsAllowed
pbr_tot_deny
pbrTotPktsDenied
pbr_tot_hits
pbrTotHits
pbr_tot_miss
tcp_tot_rxpkts
tcp_tot_rxbytes
tcp_tot_txpkts
tcp_tot_txbytes
pbrTotMisses
tcpTotRxPkts
tcpTotRxBytes
tcpTotTxPkts
tcpTotTxBytes
Packets dropped because
they match deny simple
ACL6.
Total packets that matched
a SimpleACL6 with action
ALLOW and got consumed
by NetScaler appliance.
Packets matching a simple
ACL6.
Packets not matching any
simple ACL6.
Number of simple ACL6s
configured.
Packets matching a bridge
IPv6 ACL, which in
transparent mode bypasses
service processing.
Packets dropped because
they match IPv6 ACLs with
processing mode set to
DENY.
Packets matching IPv6
ACLs with processing mode
set to ALLOW. NetScaler
appliance processes these
packets.
Packets matching a NAT
ACL6, resulting in a NAT
session.
Packets matching an IPv6
ACL.
Packets not matching any
IPv6 ACL.
Total packets that matched
the PBR with action ALLOW
Total packets that matched
PBR with action DENY
Total packets that matched
any PBR
Total packets that did not
match any PBR
TCP packets received
Bytes of TCP data received
TCP packets transmitted
Bytes of TCP data
pcb_tot_zombie_called pcbTotZombieCall
tcp_tot_synheld
tcpTotSynHeld
tcp_tot_synheld_flushe
d
tcpTotSynFlush
tcp_tot_fintimewaitcon
nclosedearly
tcpTotFinWaitClosed
tcp_err_any_portalloc_
failed
tcpErrAnyPortFail
tcp_err_ip_portalloc_fa
iled
tcpErrIpPortFail
tcp_err_stray_packets
tcpErrStrayPkt
tcp_err_send_rst
tcpErrSentRst
tcp_err_bad_state_con
nections
tcpErrBadStateConn
transmitted
Number of times the Zombie
cleanup function is called.
Every time a connection is
flushed, it is marked for
cleanup. The Zombie
cleanup function clears all
these connections at
predefined intervals.
SYN packets held on the
NetScaler appliance that are
waiting for a server
connection.
SYN packets flushed on the
NetScaler appliance
because of no response
from the server for three or
more seconds.
Connections closed on the
NetScaler appliance
because the number of
connections in the
TIME_WAIT state has
exceeded the default value
of 7000.
Port allocations that have
failed on a mapped IP
address because the
maximum limit of 65536 has
exceeded or the mapped IP
address is not configured.
Port allocations that have
failed on a subnet IP
address or virtual server IP
address because the
maximum limit of 65536 has
exceeded.
Packets received on a
connection whose state is
not maintained on the
NetScaler appliance.
Reset packets sent to a
client or a server.
Connections that are not in
a valid TCP state.
tcp_tot_fast_retransmit
tcpErrFastRetransmissions
tcp_err_1st_retransmit
tcp_err_2nd_retransmi
t
tcpErrFirstRetransmissions
tcp_err_3rd_retransmit
tcpErrThirdRetransmissions
tcp_err_4th_retransmit
tcpErrForthRetransmissions
tcp_err_5th_retransmit
tcpErrFifthRetransmissions
tcp_err_6th_retransmit
tcpErrSixthRetransmissions
tcp_err_7th_retransmit
tcpErrSeventhRetransmissions
tcp_err_data_after_fin
tcpErrDataAfterFin
tcp_err_threshold
tcpErrRstThreshold
tcp_err_oowindow
tcpErrOutOfWindowPkts
tcpErrSecondRetransmissions
TCP packets on which the
NetScaler appliance
performs a fast
retransmission in response
to three duplicate
acknowledgements or a
partial acknowledgement.
The appliance assumes that
the packet is lost and
retransmits the packet
before its time-out.
Packets retransmitted once
by the NetScaler appliance.
Packets retransmitted twice
by the NetScaler appliance.
Packets retransmitted three
times by the NetScaler
appliance.
Packets retransmitted four
times by the NetScaler
appliance.
Packets retransmitted five
times by the NetScaler
appliance.
Packets retransmitted six
times by the NetScaler
appliance.
Packets retransmitted seven
times by the NetScaler
appliance. If this fails, the
appliance terminates the
connection.
Bytes received following a
connection termination
request. This error is usually
caused by reordering
packets during transmission.
Reset packets dropped
because the default
threshold of 100 resets per
10 milliseconds has
exceeded. This is a
configurable value using the
set rate Control command.
Packets received that are
out of the current advertised
tcp_err_in_congestion
_syndropped
tcpErrSynDroppedCongestion
tcp_tot_bdg_mac_mov
ed
tcpTotBdgMacMoved
tcp_tot_bdg_collisions
tcpTotBdgCollisions
tcp_err_bdg_muted
tcpErrBdgMuted
bdg_tot_pkts
totbdgpkts
bdg_tot_Mbits
totbdgMbits
tcp_cur_ServerConn
tcpCurServerConn
tcp_cur_ServerConnCl
osing
tcpCurServerConnClosing
tcp_cur_ServerConnE
st
tcpCurServerConnEstablished
tcp_cur_ServerConnO
pening
tcpCurServerConnOpening
tcp_cur_ClientConn
tcpCurClientConn
tcp_cur_ClientConnClo
sing
tcpCurClientConnClosing
tcp_cur_ClientConnEst tcpCurClientConnEstablished
Window.
SYN packets dropped
because of network
congestion.
The number of times
bridging registered MAC
moved
The number of bridging
table collisions
The number of bridging
related interface mutes
The total number of bridged
traffic
The total number of bridged
Mbits
Server connections,
including connections in the
Opening, Established, and
Closing state.
Server connections in the
Closing state, which
indicates that the connection
termination process has
initiated but is not complete.
Current server connections
in the Established state,
which indicates that data
transfer can occur between
the NetScaler appliance and
the server.
Server connections in the
Opening state, which
indicates that the
handshakes are not yet
complete.
Client connections, including
connections in the Opening,
Established, and Closing
state.
Client connections in the
Closing state, which
indicates that the connection
termination process has
initiated but is not complete.
Current client connections in
the Established state, which
tcp_cur_ClientConnOp
ening
tcpCurClientConnOpening
tcp_cur_surgequeuele
n
tcpSurgeQueueLen
tcp_cur_GlobalReuseP
ool
tcpSpareConn
tcp_cur_active_server
_conn
tcpActiveServerConn
tcp_cur_nServers
tcpCurPhysicalServers
tcp_tot_reuse_hit
tcpReuseHit
indicates that data transfer
can occur between the
NetScaler appliance and the
client.
Client connections in the
Opening state, which
indicates that the
handshakes are not yet
complete.
Connections in the surge
queue. When the NetScaler
appliance cannot open a
connection to the server, for
example when maximum
connections are reached,
the appliance queues these
requests.
Spare connections
available. To save time and
resources in establishing
another connection for a
new client, the connection
on the server is not closed
after completing the request
from the first client and is
available for serving future
requests.
Connections to a server
currently responding to
requests.
The number of physical
servers that the NetScaler
appliance has opened
connections with.
Total number of client
transactions found with the
server connection in the
reuse-pool.
Additional Resources
Refer to CTX128667 - Citrix NetScaler Administration Guide - Release 9.3 for more
information to configure SNMP.
