What Is a MIB (Management Information Base)?
A MIB, short for Management Information Base, is a text file describing the data a device can report over SNMP: uptime, interface traffic, processor load and more. Every item in it has a readable name and a numeric address called an OID. Your monitoring tool reads the file to label incoming numbers, and the device sends the actual readings.
MIB vs MiB: Check the letter case. MiB with a lowercase i means mebibyte, a unit of storage size, and has nothing to do with networks.
What Is a MIB Used For?
Teams use a MIB to read device data by name instead of by number. It is how they track the health of servers and network devices. Common uses include:
Reading device health: Check uptime, interface status and errors by name.
Decoding alerts: Turn incoming alerts into plain descriptions.
Planning what to monitor: See which values a device can report.
Evaluating new hardware: Confirm a device reports the data you need before purchase.
How Does a MIB Work with SNMP?
With SNMP, the monitoring tool and the device both work from the same MIB. That way an OID means the same thing on each side. SNMP calls these two sides the manager and the agent:
Manager: The monitoring system that collects data.
Agent: Software on the device that answers requests.
Data then moves in two directions:
Polling: The manager asks the agent for a specific OID over UDP port 161, and the agent replies with the current value.
Traps: The agent sends an alert to the manager on UDP port 162 when something changes, such as a link going down. The MIB defines what each alert means.
Skip loading the right MIB and the manager still collects data. You just see numbers like 1.3.6.1.4.1 in place of names.
What Is the Difference Between a MIB and an OID?
An OID (object identifier) is the numeric address of one data point. A MIB is the file that gives a group of those addresses names and descriptions. Put simply, the OID says where a value is and the MIB says what it means.
Every OID belongs to one global tree, read left to right from the root down:
OID prefix | Branch | What it holds |
1.3.6.1 | iso.org.dod.internet | Root of all internet management objects |
1.3.6.1.2.1 | mib-2 | Standard objects shared by most devices |
1.3.6.1.4.1 | enterprises | Vendor objects, one branch per vendor |
Three patterns help when reading an OID:
Each endpoint holds one value: For example, one of the network metrics a device reports.
Single values end in .0: Device uptime is sysUpTime.0, or 1.3.6.1.2.1.1.3.0 in numbers.
Table rows end in an index: ifDescr.3 is the name of interface number 3.
Standard MIBs vs Vendor (Enterprise) MIBs
Standard MIBs define data that almost every SNMP device shares, while vendor MIBs, also called enterprise MIBs, define data specific to one manufacturer's hardware.
MIB | What it covers |
MIB-II | System name, uptime, location and basic interface counters |
IF-MIB | Interface status, speed, errors and traffic on fast links |
HOST-RESOURCES-MIB | Disk, memory and processor use on servers |
Vendor MIB | Fan, power supply and temperature readings for one model |
Standard MIBs ship with SNMP tools. Vendor MIBs come from the manufacturer's website.
How Do You Open and Read a MIB File?
Any text editor opens a MIB file. It's plain text, written in a syntax called SMI, or Structure of Management Information.
The first block is usually IMPORTS. It names the other MIBs this file needs to work. Definitions for each data point and each alert come after it, and every object definition uses the same fields:
Field | What it tells you |
Object name | The readable label, such as ifOperStatus |
SYNTAX | The value type, such as a number, counter or text string |
MAX-ACCESS | Whether the value is read-only, read-write or not accessible |
STATUS | Whether the object is current, deprecated or obsolete |
DESCRIPTION | What the value means, including units and status codes |
::= line | Where the object belongs in the tree, which forms its OID |
Alerts live in NOTIFICATION-TYPE entries. Each one tells your monitoring tool what one of the device's SNMP traps means. For any unclear entry, check the DESCRIPTION field, where codes like 1 for up and 2 for down are spelled out.
Querying MIB Objects with SNMP Commands
For terminal queries, most engineers use Net-SNMP, a free command-line package. Every example below points at 10.0.0.10, uses SNMP version 2c and sends public as the community string, a shared password the device checks before replying.
Command | What it tells you |
snmpget -v2c -c public 10.0.0.10 sysUpTime.0 | How long the device has run since its last restart |
snmpget -v2c -c public 10.0.0.10 1.3.6.1.2.1.1.5.0 | The device hostname, requested by numeric OID |
snmpwalk -v2c -c public 10.0.0.10 system | Basic device details such as name, uptime and location |
snmpwalk -v2c -c public 10.0.0.10 ifDescr | The name of every interface on the device |
With snmpget, you get one value back. An SNMP walk returns everything under a branch. Walk a device once to learn what it reports, then use snmpget for the values you watch.
What Is a MIB Browser?
A MIB browser is a point-and-click tool for working with MIB files. Open a branch of the OID tree, click an object, and the browser sends the request to the device for you.
A MIB browser helps engineers:
Explore an unfamiliar vendor MIB
Find the OID for a specific value
Test a get, walk or set request against a device
Common MIB Problems and Fixes
Most MIB issues appear right after a new device is added to monitoring.
Problem | Likely cause | Fix |
Raw numbers in results | Vendor MIB not loaded | Load the vendor MIB into the tool |
MIB fails to load | A MIB listed under IMPORTS is missing | Load the missing MIB first, then retry |
No Such Object error | The device lacks the OID, or access is restricted | Walk the parent branch to check |
No Such Instance error | Wrong index on the OID | Add .0 to single values or use a valid row number |
Wrong traffic rates on fast links | 32-bit counters reset too often | Poll 64-bit counters such as ifHCInOctets |
Counter resets get worse with a long polling interval, since a 32-bit counter can reset more than once between readings and make traffic reports show less than actual use. The 64-bit counters need SNMP version 2c or 3.
Explore More IT Terms
Browse our comprehensive IT glossary to learn more about technology terminology.