RMON groups
periodically takes statistical samples from variables in the probe and compares them to previously configured thresholds
If the variable crosses a threshold, an event is generated
A hysteresis mechanism is implemented to limit the generation of alarms
This group consists of the alarmTable and requires the implementation of the event group
contains statistics associated with each host discovered on the network
discovers hosts on the network by listing source and destination MAC Addresses seen in good packets
consists of hostControlTable, hostTable, and hostTimeTable