Windows Client Network Traffic Monitoring with SNMP and Zabbix

Portuguese Version

1st Step - Enable SNMP support for windows:
Start // Control Panel // Addd or Remove Programs // Add/Remove Widows Components

Management and Monitoring Tools // Details

Select the option Simple Network Management Protocol // Ok

2nd Step - Configure Clients to answer the Server´s requests:

Note:
The SNMP agents must be implemented as READING-ONLY (RO) because the SNMP collector only needs to read the data on remote machines. Limiting his permission to access the remote devices increasing security.

Never forget that the SNMP data is crossing the network in clear text and can be easily intercepted using tools like WireShark (former Ethereal).

Start // Run // Type "services.msc"

Right Click in SNMP Service // Properties

Configure Security tab as below:

The public is the name of SNMP community with read only rights and 192.168.0.10 is the Zabbix Server.

3rd Step - Find the network card identifier in the Server:
Run in Zabbix Server the following comand:
[root@monitor ~]# snmpwalk -On -v 2c -c public IP .1.3.6.1.2.1.2.2.1

The answer will be as show below:
[root@monitor ~]# snmpwalk -On -v 2c -c public 192.168.0.11 .1.3.6.1.2.1.2.2.1
.1.3.6.1.2.1.2.2.1.1.1 = INTEGER: 1
.1.3.6.1.2.1.2.2.1.1.65541 = INTEGER: 65541
.1.3.6.1.2.1.2.2.1.2.1 = STRING: MS TCP Loopback interface
.1.3.6.1.2.1.2.2.1.2.65541 = STRING: 3Com 3C996B Gigabit Server NIC
.1.3.6.1.2.1.2.2.1.3.1 = INTEGER: softwareLoopback(24)
.1.3.6.1.2.1.2.2.1.3.65541 = INTEGER: ethernetCsmacd(6)
.1.3.6.1.2.1.2.2.1.4.1 = INTEGER: 1520

Our concern is 4rd Line:
.1.3.6.1.2.1.2.2.1.2.65541 = STRING: 3Com 3C996B Gigabit Server NIC

Example for 4 different NICs:
.1.3.6.1.2.1.2.2.1.2.65539 = STRING: 3Com Gigabit NIC (3C2000)
.1.3.6.1.2.1.2.2.1.2.2 = STRING: SMC EZ Card 10/100 PCI (SMC1211TX)
.1.3.6.1.2.1.2.2.1.2.65541 = STRING: 3Com 3C996B Gigabit Server NIC
.1.3.6.1.2.1.2.2.1.2.16777219 = STRING: Intel(R) PRO Adapter

4rd Step - create a item to be monitored by Zabbix:
At Zabbix
Click in Configuration // Items
Choose your Windows Server // Click in Create Item

Note:
You must create one item for each server, because the value will be different for each network interface.

Configure like the following images:
Incoming:

Note:
The returned value of the comand snmp is the values that we will use in the two fields:
SNMP OID IF-MIB::ifInOctets.65541
Key ifInput.65541

Outcoming:

Now just create a graphic using these items. The image below shows an example of generated grap: