SNMP4W2K Support Page

Troubleshooting How-tos
General Questions Performance Tuning Windows 2000
Disk Monitoring Monitoring SQL Server 2000
Missing Performance Counters Monitoring Exchange Server 2000
Missing IIS, SQL or NNTP/SMTP objects Monitoring ISA Server 2000
MIB Browsing (WALK) Problems Monitoring Active Directory (NTDS)
Crashing SNMP Service Monitoring Media Services
Event Log Messages SNMP4W2K-PLUS and Network Node Manager


This page was set up to be a first point of reference if you are experiencing difficulties with SNMP4W2K (Standard or PLUS).  Look through it to see if you can find reference to the particular problem you are encountering.

Unfortunately, Microsoft's implementation (and support) of SNMP (particularly as it pertains to extracting performance counters) is somewhat less than perfect.  In fact, they no longer provide or support perf2mib.exe in their resource kit, so we have to work with what we can get.

If you cannot find any information on this page to help you, please send an email to, and I will respond as quickly as I can.  Registered users of SNMP4W2K-PLUS get priority service!

General Questions

Q) Will the SNMP4W2K extension agent conflict with others I might have installed?

A) Not likely.  There are two places a conflict might arise.  One is in the name of the extension agent itself.  MS uses a numbering scheme to add extension agents, as do other apps.  They look for the highest number and then increase it by one and that's the number they use for their extension agent.  You can also use names, and that's what I do.  I add an extension agent with the name SNMP4W2K, so you should not have to worry about conflicts with other extension agents.  As for programmatic conflicts, there might be instances where another extension agent calls the perfmib.dll (as does SNMP4W2K), and this might cause some grief.  If you suspect this to be happening, disable the other agent to confirm.

Can I use SNMP4W2K if I installed SNMP after programs such as IIS/HTTP or SQL Server?

A) Yes, because SNMP extracts data from performance counters!  However, if you want to take advantage of that applications' native SNMP support (i.e. not performance counters), then there is some registry patching that needs to take place.  See the next section for more details.

Missing IIS, SQL or NNTP/SMTP objects

Q) I installed SNMP and SNMP4W2K, and when I browse the SNMP4W2K PERFMIB.MIB, I still can't get at some (or all) of the non-performance counter objects (i.e. IIS, HTTP, FTP. NNTP, SMTP, MSSQL) from the additional MIBS (Inetsrv.mib, http.mib, ftp.mib. mssql.mib, nntp.mib, smtp.mib) that were compiled into the SNMP4W2K MIB.BIN.

A) This is generally because the SNMP service was installed after the application(s) in question.  As a general rule, it is a good idea to have SNMP installed BEFORE any other applications in case they check for SNMP, and only install SNMP support if the SNMP service is installed.   IIS and SQL are examples of applications that must "see" SNMP in order to install SNMP support. You CAN add SNMP support later, but it requires some registry tweaking.  See my Troubleshooting Page on how to do this.  Or if you would like, download my fixes for each situation below:

Missing Performance Counters

Q) Some of the OIDs from the SNMP4W2K PERFMIB.MIB do not return anything.

A) If you try to reference an OID that "points" to a non-existent counter, then SNMP will not return valid (or any) data.  Check the SNMP4W2K Web Page (select the "available Statistics" button), and compare the embedded counters supported by SNMP4W2K and the Counters available in Performance Monitor on the system that is giving you grief.

There are also some counters that do not seem to extract properly under Windows 2000.  Known "problem counters" are:

Event Log Messages

Q) Event ID 2003 warning messages may appear in the Application event log when you install SNMP4W2K, and start the SNMP service.  These messages make reference to w3ctrs.dll, infoctrs.dll, aspperf.dll and may include ftpctrs.dll as well.

A) Here is a link to the Microsoft Technet site, with a description of the error and how to fix it. Click here to read an MS KnowlegeBase article (Q267831) about these types of errors.  Go there first, and make sure you are satisfied that the messages you see are the same.  You may have references to ftpctrs.dll, and while the page says the errors don't happen on NTFS drives, you may find that they do in fact happen even though the drives are NTFS.  If you are satisfied that these are the errors you are getting, then download my FIX_2003.ZIP file here.  Unzip it into the system32 directory, and run it.  Then reboot, and the errors should no longer appear.

Q) I am getting Event ID 1101 in the System Event Log.  It says " The SNMP Service is ignoring extension agent key SOFTWARE\Microsoft\MSSQLServer\SNMP\CurrentVersion because it is missing or misconfigured."

A) Here is a link to the Microsoft Technet site, with a description of the error and how to fix it.  Click here to read an MS KnowlegeBase article (Q279870).  In this article, MS admits that SNMP can only monitor the default instance of SQL server, NOT a named instance.  Sorry!

Q) I am getting Event ID 322 in the Application Event Log from SQL Executive.

A) Here is a link to MS Knowlegebase article Q230393.

Disk Monitoring

Q) I downloaded SNMP4W2K on my Windows 2000 system, and would like to monitor disk space, but am unable to do so.  The MIB browser does not return a value for logical disk stats.  What can I do?

A) You need to enable disk performance counters.  Follow these steps and retry:
    1) Open an OS prompt
    2) Type "diskperf -y" (omit the "")
    3) Close the OS prompt
    4) Reboot the computer

This will enable disk performance counters, and once done, these counters can be accessed by SNMP4W2K.

"BUT WAIT!" You say!  "I checked, and my system HAS all the performance counters enabled!"  OK, sometimes, the system "thinks" all counters are enabled, and you still cannot get disk stats.  

Try disabling all counters ...

    1) Open an OS prompt
    2) Type "diskperf -n" (omit the "")
    3) Close the OS prompt
    4) Reboot the computer

 .... and then re-enabling them all over again ...

    1) Open an OS prompt
    2) Type "diskperf -y" (omit the "")
    3) Close the OS prompt
    4) Reboot the computer


SQL Server 2000 Monitoring

Q) I would like to use SNMP4W2K-PLUS to monitor SQL Server 2000, but do not know what to look for.  What should I monitor?

A) I recently found an excellent article on SQL Server performance monitoring.  Click here to read it, and here for more SQL Server related articles from the same author.

Exchange Server 2000 Monitoring

Q) I would like to use SNMP4W2K-PLUS to monitor Exchange Server 2000, but do not know what to look for.  What should I monitor?

A) Click here to see a nice MS Technet article on Exchange Enterprise Monitoring.  Another excellent article on Exchange 2000 performance monitoring can be found here.  Finally, if you click here, you will find another Exchange Performance Monitoring article, and although it is version 5.5 centric, you will likely find some excellent information.

ISA Server 2000 Monitoring

Q) I would like to use SNMP4W2K-PLUS to monitor ISA Server 2000, but do not know what to look for.  What should I monitor?

A) Click here to see a nice MS Technet article on ISA Server 2000 Performance Monitoring.

Active Directory (NTDS) Monitoring

Q) I would like to use SNMP4W2K-PLUS to monitor My Active Directory (NTDS), but do not know what to look for.  What should I monitor?

A) Click here to see a nice MS Technet article on Active Directory monitoring.  Select the General Domain Controller Monitoring topic at the top of the page, then scroll down a wee bit, and you will see a list of Active Directory Performance Counter Objects, what they mean and what to look for.

SNMP4W2K-PLUS and Network Node Manager

Integrating SNMP4W2K into Network Node Manager 6.2

In order to integrate SNMP4W2K into NNM, you must first load the required MIBS.  In this case, you need the MSFT, and the PERFMIB.MIB from SNMP4W2K. If you want native Windows 2000 Host MIB stats, you can optionally load the HOSTS MIB (also included with SNMP4W2K)

Loading SNMP4W2K PERFMIB support into HPOV NNMv6.2

1) Load the MSFT.MIB as supplied with SNMP4W2K-PLUS. This lets you browse the Private Enterprises/Microsoft branch
2) Load the PERFMIB.MIB as supplied with SNMP4W2K-PLUS. This lets you browse the Windows 2000 performance stats.
3) Load the RFC1514-HOSTS.MIB as supplied with SNMP4W2K-PLUS *unless it is already loaded. This lets you browse
the native Windows 2000 HOSTS statistics.

At this point, you can now select a node, and browse the SNMP4W2K-PLUS MIB, viewing data as collected from the performance counter on that node.

Building a MIB Application 

If you want to make an OID (i.e. CPU utilization) available from the pull-down menu, then start the MIB Application Builder, and create your own graph. To do this, start the MIB Application builder, and select Edit/New, then type in an Application ID (i.e. S4W2K_MEM), select Graph as the type, then an applicable Title (i.e. SNMP4W2K Memory Utilization), then your desired polling interval (i.e. 5 seconds), and an X axis label (i.e. Bytes) and then choose Next.

At this point, you will be presented with a windows titled "New MIB Application - Display Fields", select Add, and browse to the OID you want to monitor (i.e., and then press Add again.

Once that counter is added, then you will see a windows asking you where on the NNM menu bar you want to add the query, and What you want to call it. For this example, we will call it SNMP4W2K-MemFreeBytes, which you can add right next to the Configuration-> string. Press OK. You can now close the MIB Application Builder.

Now, then you want to instantly track the memory free bytes on a system that has the SNMP4W2K MIB installed, you simply highlight the node, and select Configuration/SNMP4W2K-MemFreeBytes.  You repeat this process for the other OIDs and stats you would like to add to your NNM console.

You can now assign threshold level tracking as well if you so desire, but that will not be discussed here.


Media Services Monitoring

Q) I would like to use SNMP4W2K-PLUS to monitor my Windows Media Services, but do not know what to look for.  What should I monitor?

A) That depends on how you are using it.  For basic Unicast streaming (where a user connects to your server within Media player, you can track the aggregate send and read rates to get an idea how much traffic (bytes/second) is being used.  An example of this is shown in the Getif graph below, showing those metrics for a 1m:07s stream on a local connection.

Obviously, you can browse using GetIF to the desired metric you want, and track that one as well as or instead of the ones suggested above.  A good link to follow is here at Microsofts' Media Services Web Site.

MIB Browsing Problems

Q) Sometimes when I WALK a table from SNMP4W2K PERFMIB.MIB, I get a single row, and then the next time I walk the same table I get more rows.  What's up?

A) In some cases, an OID in the middle of a walk is "broken", and makes the walk fail.  In many cases, if you specify the OID specifically, you can still GET the data you are looking for.  You might try SNMPUTIL, using the GET command like so...
    snmputil get [ip address] [community] [oid]
... and reference the OID you would like.  It might take a few tries to get the one you want, but you might find a way around this situation.

Crashing SNMP Service

Q) The SNMP service periodically crashes.

A) There is likely a DLL conflict with another extension agent DLL.  This may or may not be the SNMP4W2K perfmib.dll.  First of all, be sure you have the most current (stable) service pack and hotfixes.  Then you can can begin to identify the culprit by following these simple steps:

1) Open an OS prompt
2) Start regedt32 (start/run/regedt32), and navigate to HKEY_Local_Machine/System/CurrentControlSet/Services/SNMP/Parameters/ExtensionAgents.
3) Select the SNMP4W2K entry (double click it)
4) Change the software registry reference by adding an X to the end (for example, change the SNMP4W2K reference so that it reads SOFTWARE/WTCS/SNMP4W2K/CurrentVersionX).
5) In the OS prompt, type net stop snmp, and then net start snmp.
6) Do whatever you were doing that seemed to cause the SNMP service to crash.  If it does, then the SNMP4W2K extension agent is not the cause.  Remove the X you just added, select another agent, and repeat steps 4, 5 and 6.

Email if you are still having problems.  Registered users get priority response, however I will respond as soon as possible.

To return the the main page, click the Go Home! logo!