Created
May 8, 2020 16:27
-
-
Save Davnit/104bad73d975b8d5a10742df6ea86445 to your computer and use it in GitHub Desktop.
pfSense SNMP MIB with interface and label names properly decoded from hex string to human-readable text
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
-- | |
-- ---------------------------------------------------------------------------- | |
-- "THE BEER-WARE LICENSE" (Revision 42): | |
-- <[email protected]> wrote this file. As long as you retain this notice you | |
-- can do whatever you want with this stuff. If we meet some day, and you think | |
-- this stuff is worth it, you can buy me a beer in return. -Philip Paeps | |
-- ---------------------------------------------------------------------------- | |
-- | |
-- $FreeBSD$ | |
-- | |
-- UPDATED TO INCLUDE PROPER HANDLING OF INTERFACE/LABEL NAMES | |
-- | |
BEGEMOT-PF-MIB DEFINITIONS ::= BEGIN | |
IMPORTS | |
MODULE-IDENTITY, OBJECT-TYPE, Counter64, Integer32, | |
TimeTicks, Unsigned32 | |
FROM SNMPv2-SMI | |
TruthValue, DisplayString | |
FROM SNMPv2-TC | |
InetAddress, InetAddressType, InetAddressPrefixLength | |
FROM INET-ADDRESS-MIB | |
begemot | |
FROM BEGEMOT-MIB; | |
begemotPf MODULE-IDENTITY | |
LAST-UPDATED "201003180000Z" | |
ORGANIZATION "NixSys BVBA" | |
CONTACT-INFO | |
" Philip Paeps | |
Postal: NixSys BVBA | |
Louizastraat 14 | |
BE-2800 Mechelen | |
Belgium | |
E-Mail: [email protected]" | |
DESCRIPTION | |
"The Begemot MIB for the pf packet filter." | |
REVISION "201003180000Z" | |
DESCRIPTION | |
"Modified pfTablesAddrEntry to support IPv6 | |
addresses - added pfTablesAddrNetType column | |
and modified type of pfTablesAddrNet to | |
InetAddress." | |
REVISION "200912050000Z" | |
DESCRIPTION | |
"Added support for retrieving counters of labeled | |
pf filter rules via pfLabelspfLabels subtree." | |
REVISION "200501240000Z" | |
DESCRIPTION | |
"Initial revision." | |
::= { begemot 200 } | |
begemotPfObjects OBJECT IDENTIFIER ::= { begemotPf 1 } | |
-- -------------------------------------------------------------------------- | |
pfStatus OBJECT IDENTIFIER ::= { begemotPfObjects 1 } | |
pfCounter OBJECT IDENTIFIER ::= { begemotPfObjects 2 } | |
pfStateTable OBJECT IDENTIFIER ::= { begemotPfObjects 3 } | |
pfSrcNodes OBJECT IDENTIFIER ::= { begemotPfObjects 4 } | |
pfLimits OBJECT IDENTIFIER ::= { begemotPfObjects 5 } | |
pfTimeouts OBJECT IDENTIFIER ::= { begemotPfObjects 6 } | |
pfLogInterface OBJECT IDENTIFIER ::= { begemotPfObjects 7 } | |
pfInterfaces OBJECT IDENTIFIER ::= { begemotPfObjects 8 } | |
pfTables OBJECT IDENTIFIER ::= { begemotPfObjects 9 } | |
pfAltq OBJECT IDENTIFIER ::= { begemotPfObjects 10 } | |
pfLabels OBJECT IDENTIFIER ::= { begemotPfObjects 11 } | |
-- -------------------------------------------------------------------------- | |
-- | |
-- status information | |
-- | |
pfStatusRunning OBJECT-TYPE | |
SYNTAX TruthValue | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"True if pf is currently enabled." | |
::= { pfStatus 1 } | |
pfStatusRuntime OBJECT-TYPE | |
SYNTAX TimeTicks | |
UNITS "1/100th of a Second" | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Indicates how long pf has been enabled. If pf is not currently | |
enabled, indicates how long it has been disabled. If pf has not | |
been enabled or disabled since the system was started, the value | |
will be 0." | |
::= { pfStatus 2 } | |
pfStatusDebug OBJECT-TYPE | |
SYNTAX INTEGER { none(0), urgent(1), misc(2), loud(3) } | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Indicates the debug level at which pf is running." | |
::= { pfStatus 3 } | |
pfStatusHostId OBJECT-TYPE | |
SYNTAX DisplayString (SIZE (0..32)) | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The (unique) host identifier of the machine running pf." | |
::= { pfStatus 4 } | |
-- -------------------------------------------------------------------------- | |
-- | |
-- counters | |
-- | |
pfCounterMatch OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Number of packets that matched a filter rule." | |
::= { pfCounter 1 } | |
pfCounterBadOffset OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Number of packets with bad offset." | |
::= { pfCounter 2 } | |
pfCounterFragment OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Number of fragmented packets." | |
::= { pfCounter 3 } | |
pfCounterShort OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Number of short packets." | |
::= { pfCounter 4 } | |
pfCounterNormalize OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Number of normalized packets." | |
::= { pfCounter 5 } | |
pfCounterMemDrop OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Number of packets dropped due to memory limitations." | |
::= { pfCounter 6 } | |
-- -------------------------------------------------------------------------- | |
-- | |
-- state table | |
-- | |
pfStateTableCount OBJECT-TYPE | |
SYNTAX Unsigned32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Number of entries in the state table." | |
::= { pfStateTable 1 } | |
pfStateTableSearches OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Number of searches against the state table." | |
::= { pfStateTable 2 } | |
pfStateTableInserts OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Number of entries inserted into the state table." | |
::= { pfStateTable 3 } | |
pfStateTableRemovals OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Number of entries removed from the state table." | |
::= { pfStateTable 4 } | |
-- -------------------------------------------------------------------------- | |
-- | |
-- source nodes | |
-- | |
pfSrcNodesCount OBJECT-TYPE | |
SYNTAX Unsigned32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Number of entries in the source tracking table." | |
::= { pfSrcNodes 1 } | |
pfSrcNodesSearches OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Number of searches against the source tracking table." | |
::= { pfSrcNodes 2 } | |
pfSrcNodesInserts OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Number of entries inserted into the source tracking table." | |
::= { pfSrcNodes 3 } | |
pfSrcNodesRemovals OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Number of entries removed from the source tracking table." | |
::= { pfSrcNodes 4 } | |
-- -------------------------------------------------------------------------- | |
-- | |
-- limits | |
-- | |
pfLimitsStates OBJECT-TYPE | |
SYNTAX Unsigned32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Maximum number of 'keep state' rules in the ruleset." | |
::= { pfLimits 1 } | |
pfLimitsSrcNodes OBJECT-TYPE | |
SYNTAX Unsigned32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Maximum number of 'sticky-address' or 'source-track' rules | |
in the ruleset." | |
::= { pfLimits 2 } | |
pfLimitsFrags OBJECT-TYPE | |
SYNTAX Unsigned32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Maximum number of 'scrub' rules in the ruleset." | |
::= { pfLimits 3 } | |
-- -------------------------------------------------------------------------- | |
-- | |
-- timeouts | |
-- | |
pfTimeoutsTcpFirst OBJECT-TYPE | |
SYNTAX Integer32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"State after the first packet in a connection." | |
::= { pfTimeouts 1 } | |
pfTimeoutsTcpOpening OBJECT-TYPE | |
SYNTAX Integer32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"State before the destination host ever sends a packet." | |
::= { pfTimeouts 2 } | |
pfTimeoutsTcpEstablished OBJECT-TYPE | |
SYNTAX Integer32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The fully established state." | |
::= { pfTimeouts 3 } | |
pfTimeoutsTcpClosing OBJECT-TYPE | |
SYNTAX Integer32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"State after the first FIN has been sent." | |
::= { pfTimeouts 4 } | |
pfTimeoutsTcpFinWait OBJECT-TYPE | |
SYNTAX Integer32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"State after both FINs have been exchanged and the | |
connection is closed." | |
::= { pfTimeouts 5 } | |
pfTimeoutsTcpClosed OBJECT-TYPE | |
SYNTAX Integer32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"State after one endpoint sends an RST." | |
::= { pfTimeouts 6 } | |
pfTimeoutsUdpFirst OBJECT-TYPE | |
SYNTAX Integer32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"State after the first packet." | |
::= { pfTimeouts 7 } | |
pfTimeoutsUdpSingle OBJECT-TYPE | |
SYNTAX Integer32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"State if the source host sends more than one packet but | |
the destination host has never sent one back." | |
::= { pfTimeouts 8 } | |
pfTimeoutsUdpMultiple OBJECT-TYPE | |
SYNTAX Integer32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"State if both hosts have sent packets." | |
::= { pfTimeouts 9 } | |
pfTimeoutsIcmpFirst OBJECT-TYPE | |
SYNTAX Integer32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"State after the first packet." | |
::= { pfTimeouts 10 } | |
pfTimeoutsIcmpError OBJECT-TYPE | |
SYNTAX Integer32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"State after an ICMP error came back in response to an | |
ICMP packet." | |
::= { pfTimeouts 11 } | |
pfTimeoutsOtherFirst OBJECT-TYPE | |
SYNTAX Integer32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"State after the first packet." | |
::= { pfTimeouts 12 } | |
pfTimeoutsOtherSingle OBJECT-TYPE | |
SYNTAX Integer32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"State if the source host sends more than one packet but | |
the destination host has never sent one back." | |
::= { pfTimeouts 13 } | |
pfTimeoutsOtherMultiple OBJECT-TYPE | |
SYNTAX Integer32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"State if both hosts have sent packets." | |
::= { pfTimeouts 14 } | |
pfTimeoutsFragment OBJECT-TYPE | |
SYNTAX Integer32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Seconds before an unassembled fragment is expired." | |
::= { pfTimeouts 15 } | |
pfTimeoutsInterval OBJECT-TYPE | |
SYNTAX Integer32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Interval between purging expired states and fragments." | |
::= { pfTimeouts 16 } | |
pfTimeoutsAdaptiveStart OBJECT-TYPE | |
SYNTAX Integer32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"When the number of state entries exceeds this value, | |
adaptive scaling begins." | |
::= { pfTimeouts 17 } | |
pfTimeoutsAdaptiveEnd OBJECT-TYPE | |
SYNTAX Integer32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"When reaching this number of state entries, all timeout | |
values become zero, effectively purging all state entries | |
immediately." | |
::= { pfTimeouts 18 } | |
pfTimeoutsSrcNode OBJECT-TYPE | |
SYNTAX Integer32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Length of time to retain a source tracking entry after | |
the last state expires." | |
::= { pfTimeouts 19 } | |
-- -------------------------------------------------------------------------- | |
-- | |
-- log interface | |
-- | |
pfLogInterfaceName OBJECT-TYPE | |
SYNTAX DisplayString (SIZE (0..32)) | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The name of the interface configured with 'set loginterface'. | |
If no interface has been configured, the object will be empty." | |
::= { pfLogInterface 1 } | |
pfLogInterfaceIp4BytesIn OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Number of IPv4 bytes passed in on the loginterface." | |
::= { pfLogInterface 2 } | |
pfLogInterfaceIp4BytesOut OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Number of IPv4 bytes passed out on the loginterface." | |
::= { pfLogInterface 3 } | |
pfLogInterfaceIp4PktsInPass OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Number of IPv4 packets passed in on the loginterface." | |
::= { pfLogInterface 4 } | |
pfLogInterfaceIp4PktsInDrop OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Number of IPv4 packets dropped coming in on the loginterface." | |
::= { pfLogInterface 5 } | |
pfLogInterfaceIp4PktsOutPass OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Number of IPv4 packets passed out on the loginterface." | |
::= { pfLogInterface 6 } | |
pfLogInterfaceIp4PktsOutDrop OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Number of IPv4 packets dropped going out on the loginterface." | |
::= { pfLogInterface 7 } | |
pfLogInterfaceIp6BytesIn OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Number of IPv6 bytes passed in on the loginterface." | |
::= { pfLogInterface 8 } | |
pfLogInterfaceIp6BytesOut OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Number of IPv6 bytes passed out on the loginterface." | |
::= { pfLogInterface 9 } | |
pfLogInterfaceIp6PktsInPass OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Number of IPv6 packets passed in on the loginterface." | |
::= { pfLogInterface 10 } | |
pfLogInterfaceIp6PktsInDrop OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Number of IPv6 packets dropped coming in on the loginterface." | |
::= { pfLogInterface 11 } | |
pfLogInterfaceIp6PktsOutPass OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Number of IPv6 packets passed out on the loginterface." | |
::= { pfLogInterface 12 } | |
pfLogInterfaceIp6PktsOutDrop OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Number of IPv6 packets dropped going out on the loginterface." | |
::= { pfLogInterface 13 } | |
-- -------------------------------------------------------------------------- | |
-- | |
-- interfaces | |
-- | |
pfInterfacesIfNumber OBJECT-TYPE | |
SYNTAX Integer32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of network interfaces on this system." | |
::= { pfInterfaces 1 } | |
pfInterfacesIfTable OBJECT-TYPE | |
SYNTAX SEQUENCE OF PfInterfacesIfEntry | |
MAX-ACCESS not-accessible | |
STATUS current | |
DESCRIPTION | |
"Table of network interfaces, indexed on pfInterfacesIfNumber." | |
::= { pfInterfaces 2 } | |
pfInterfacesIfEntry OBJECT-TYPE | |
SYNTAX PfInterfacesIfEntry | |
MAX-ACCESS not-accessible | |
STATUS current | |
DESCRIPTION | |
"An entry in the pfInterfacesIfTable containing information | |
about a particular network interface in the machine." | |
INDEX { pfInterfacesIfIndex } | |
::= { pfInterfacesIfTable 1 } | |
PfInterfacesIfEntry ::= SEQUENCE { | |
pfInterfacesIfIndex Integer32, | |
pfInterfacesIfDescr DisplayString, | |
pfInterfacesIfType INTEGER, | |
pfInterfacesIfTZero TimeTicks, | |
pfInterfacesIfRefsState Null, | |
pfInterfacesIfRefsRule Unsigned32, | |
pfInterfacesIf4BytesInPass Counter64, | |
pfInterfacesIf4BytesInBlock Counter64, | |
pfInterfacesIf4BytesOutPass Counter64, | |
pfInterfacesIf4BytesOutBlock Counter64, | |
pfInterfacesIf4PktsInPass Counter64, | |
pfInterfacesIf4PktsInBlock Counter64, | |
pfInterfacesIf4PktsOutPass Counter64, | |
pfInterfacesIf4PktsOutBlock Counter64, | |
pfInterfacesIf6BytesInPass Counter64, | |
pfInterfacesIf6BytesInBlock Counter64, | |
pfInterfacesIf6BytesOutPass Counter64, | |
pfInterfacesIf6BytesOutBlock Counter64, | |
pfInterfacesIf6PktsInPass Counter64, | |
pfInterfacesIf6PktsInBlock Counter64, | |
pfInterfacesIf6PktsOutPass Counter64, | |
pfInterfacesIf6PktsOutBlock Counter64 | |
} | |
pfInterfacesIfIndex OBJECT-TYPE | |
SYNTAX Integer32 (1..2147483647) | |
MAX-ACCESS not-accessible | |
STATUS current | |
DESCRIPTION | |
"A unique value, greater than zero, for each interface." | |
::= { pfInterfacesIfEntry 1 } | |
pfInterfacesIfDescr OBJECT-TYPE | |
SYNTAX DisplayString (SIZE (0..32)) | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The name of the interface." | |
::= { pfInterfacesIfEntry 2 } | |
pfInterfacesIfType OBJECT-TYPE | |
SYNTAX INTEGER { group(0), instance(1), detached(2) } | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Indicates whether the interface is a group inteface, an | |
interface instance, or whether it has been removed or | |
destroyed." | |
::= { pfInterfacesIfEntry 3 } | |
pfInterfacesIfTZero OBJECT-TYPE | |
SYNTAX TimeTicks | |
UNITS "1/100th of a Second" | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Time since statistics were last reset or since the | |
interface was loaded." | |
::= { pfInterfacesIfEntry 4 } | |
pfInterfacesIfRefsState OBJECT-TYPE | |
SYNTAX Unsigned32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of state and/or source track entries referencing | |
this interface." | |
::= { pfInterfacesIfEntry 5 } | |
pfInterfacesIfRefsRule OBJECT-TYPE | |
SYNTAX Unsigned32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of rules referencing this interface." | |
::= { pfInterfacesIfEntry 6 } | |
pfInterfacesIf4BytesInPass OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of IPv4 bytes passed coming in on this interface." | |
::= { pfInterfacesIfEntry 7 } | |
pfInterfacesIf4BytesInBlock OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of IPv4 bytes blocked coming in on this interface." | |
::= { pfInterfacesIfEntry 8 } | |
pfInterfacesIf4BytesOutPass OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of IPv4 bytes passed going out on this interface." | |
::= { pfInterfacesIfEntry 9 } | |
pfInterfacesIf4BytesOutBlock OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of IPv4 bytes blocked going out on this interface." | |
::= { pfInterfacesIfEntry 10 } | |
pfInterfacesIf4PktsInPass OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of IPv4 packets passed coming in on this interface." | |
::= { pfInterfacesIfEntry 11 } | |
pfInterfacesIf4PktsInBlock OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of IPv4 packets blocked coming in on this interface." | |
::= { pfInterfacesIfEntry 12 } | |
pfInterfacesIf4PktsOutPass OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of IPv4 packets passed going out on this interface." | |
::= { pfInterfacesIfEntry 13 } | |
pfInterfacesIf4PktsOutBlock OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of IPv4 packets blocked going out on this interface." | |
::= { pfInterfacesIfEntry 14 } | |
pfInterfacesIf6BytesInPass OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of IPv6 bytes passed coming in on this interface." | |
::= { pfInterfacesIfEntry 15 } | |
pfInterfacesIf6BytesInBlock OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of IPv6 bytes blocked coming in on this interface." | |
::= { pfInterfacesIfEntry 16 } | |
pfInterfacesIf6BytesOutPass OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of IPv6 bytes passed going out on this interface." | |
::= { pfInterfacesIfEntry 17 } | |
pfInterfacesIf6BytesOutBlock OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of IPv6 bytes blocked going out on this interface." | |
::= { pfInterfacesIfEntry 18 } | |
pfInterfacesIf6PktsInPass OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of IPv6 packets passed coming in on this interface." | |
::= { pfInterfacesIfEntry 19 } | |
pfInterfacesIf6PktsInBlock OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of IPv6 packets blocked coming in on this interface." | |
::= { pfInterfacesIfEntry 20 } | |
pfInterfacesIf6PktsOutPass OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of IPv6 packets passed going out on this interface." | |
::= { pfInterfacesIfEntry 21 } | |
pfInterfacesIf6PktsOutBlock OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of IPv6 packets blocked going out on this interface." | |
::= { pfInterfacesIfEntry 22 } | |
-- -------------------------------------------------------------------------- | |
-- | |
-- tables | |
-- | |
pfTablesTblNumber OBJECT-TYPE | |
SYNTAX Integer32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of tables on this system." | |
::= { pfTables 1 } | |
pfTablesTblTable OBJECT-TYPE | |
SYNTAX SEQUENCE OF PfTablesTblEntry | |
MAX-ACCESS not-accessible | |
STATUS current | |
DESCRIPTION | |
"Table of tables, index on pfTablesTblIndex." | |
::= { pfTables 2 } | |
pfTablesTblEntry OBJECT-TYPE | |
SYNTAX PfTablesTblEntry | |
MAX-ACCESS not-accessible | |
STATUS current | |
DESCRIPTION | |
"Any entry in the pfTablesTblTable containing information | |
about a particular table on the system." | |
INDEX { pfTablesTblIndex } | |
::= { pfTablesTblTable 1 } | |
PfTablesTblEntry ::= SEQUENCE { | |
pfTablesTblIndex Integer32, | |
pfTablesTblDescr DisplayString, | |
pfTablesTblCount Integer32, | |
pfTablesTblTZero TimeTicks, | |
pfTablesTblRefsAnchor Integer32, | |
pfTablesTblRefsRule Integer32, | |
pfTablesTblEvalMatch Counter64, | |
pfTablesTblEvalNoMatch Counter64, | |
pfTablesTblBytesInPass Counter64, | |
pfTablesTblBytesInBlock Counter64, | |
pfTablesTblBytesInXPass Counter64, | |
pfTablesTblBytesOutPass Counter64, | |
pfTablesTblBytesOutBlock Counter64, | |
pfTablesTblBytesOutXPass Counter64, | |
pfTablesTblPktsInPass Counter64, | |
pfTablesTblPktsInBlock Counter64, | |
pfTablesTblPktsInXPass Counter64, | |
pfTablesTblPktsOutPass Counter64, | |
pfTablesTblPktsOutBlock Counter64, | |
pfTablesTblPktsOutXPass Counter64 | |
} | |
pfTablesTblIndex OBJECT-TYPE | |
SYNTAX Integer32 (1..2147483647) | |
MAX-ACCESS not-accessible | |
STATUS current | |
DESCRIPTION | |
"A unique value, greater than zero, for each table." | |
::= { pfTablesTblEntry 1 } | |
pfTablesTblDescr OBJECT-TYPE | |
SYNTAX DisplayString (SIZE (0..32)) | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The name of the table." | |
::= { pfTablesTblEntry 2 } | |
pfTablesTblCount OBJECT-TYPE | |
SYNTAX Integer32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of addresses in the table." | |
::= { pfTablesTblEntry 3 } | |
pfTablesTblTZero OBJECT-TYPE | |
SYNTAX TimeTicks | |
UNITS "1/100th of a Second" | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The time passed since the statistics of this table were last | |
cleared or the time since this table was loaded, whichever is | |
sooner." | |
::= { pfTablesTblEntry 4 } | |
pfTablesTblRefsAnchor OBJECT-TYPE | |
SYNTAX Integer32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of anchors referencing this table." | |
::= { pfTablesTblEntry 5 } | |
pfTablesTblRefsRule OBJECT-TYPE | |
SYNTAX Integer32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of rules referencing this table." | |
::= { pfTablesTblEntry 6 } | |
pfTablesTblEvalMatch OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of evaluations returning a match." | |
::= { pfTablesTblEntry 7 } | |
pfTablesTblEvalNoMatch OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of evaluations not returning a match." | |
::= { pfTablesTblEntry 8 } | |
pfTablesTblBytesInPass OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of bytes passed in matching the table." | |
::= { pfTablesTblEntry 9 } | |
pfTablesTblBytesInBlock OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of bytes blocked coming in matching the table." | |
::= { pfTablesTblEntry 10 } | |
pfTablesTblBytesInXPass OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of bytes statefully passed in where the state | |
entry refers to the table, but the table no longer contains | |
the address in question." | |
::= { pfTablesTblEntry 11 } | |
pfTablesTblBytesOutPass OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of bytes passed out matching the table." | |
::= { pfTablesTblEntry 12 } | |
pfTablesTblBytesOutBlock OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of bytes blocked going out matching the table." | |
::= { pfTablesTblEntry 13 } | |
pfTablesTblBytesOutXPass OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of bytes statefully passed out where the state | |
entry refers to the table, but the table no longer contains | |
the address in question." | |
::= { pfTablesTblEntry 14 } | |
pfTablesTblPktsInPass OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of packets passed in matching the table." | |
::= { pfTablesTblEntry 15 } | |
pfTablesTblPktsInBlock OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of packets blocked coming in matching the table." | |
::= { pfTablesTblEntry 16 } | |
pfTablesTblPktsInXPass OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of packets statefully passed in where the state | |
entry refers to the table, but the table no longer contains | |
the address in question." | |
::= { pfTablesTblEntry 17 } | |
pfTablesTblPktsOutPass OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of packets passed out matching the table." | |
::= { pfTablesTblEntry 18 } | |
pfTablesTblPktsOutBlock OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of packets blocked going out matching the table." | |
::= { pfTablesTblEntry 19 } | |
pfTablesTblPktsOutXPass OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of packets statefully passed out where the state | |
entry refers to the table, but the table no longer contains | |
the address in question." | |
::= { pfTablesTblEntry 20 } | |
pfTablesAddrTable OBJECT-TYPE | |
SYNTAX SEQUENCE OF PfTablesAddrEntry | |
MAX-ACCESS not-accessible | |
STATUS current | |
DESCRIPTION | |
"Table of addresses from every table on the system." | |
::= { pfTables 3 } | |
pfTablesAddrEntry OBJECT-TYPE | |
SYNTAX PfTablesAddrEntry | |
MAX-ACCESS not-accessible | |
STATUS current | |
DESCRIPTION | |
"An entry in the pfTablesAddrTable containing information | |
about a particular entry in a table." | |
INDEX { pfTablesAddrIndex } | |
::= { pfTablesAddrTable 1 } | |
PfTablesAddrEntry ::= SEQUENCE { | |
pfTablesAddrIndex Integer32, | |
pfTablesAddrNetType InetAddressType, | |
pfTablesAddrNet InetAddress, | |
pfTablesAddrPrefix InetAddressPrefixLength, | |
pfTablesAddrTZero TimeTicks, | |
pfTablesAddrBytesInPass Counter64, | |
pfTablesAddrBytesInBlock Counter64, | |
pfTablesAddrBytesOutPass Counter64, | |
pfTablesAddrBytesOutBlock Counter64, | |
pfTablesAddrPktsInPass Counter64, | |
pfTablesAddrPktsInBlock Counter64, | |
pfTablesAddrPktsOutPass Counter64, | |
pfTablesAddrPktsOutBlock Counter64 | |
} | |
pfTablesAddrIndex OBJECT-TYPE | |
SYNTAX Integer32 (1..2147483647) | |
MAX-ACCESS not-accessible | |
STATUS current | |
DESCRIPTION | |
"A unique value, greater than zero, for each address." | |
::= { pfTablesAddrEntry 1 } | |
pfTablesAddrNetType OBJECT-TYPE | |
SYNTAX InetAddressType | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The type of address in the corresponding pfTablesAddrNet object." | |
::= { pfTablesAddrEntry 2 } | |
pfTablesAddrNet OBJECT-TYPE | |
SYNTAX InetAddress | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The IP address of this particular table entry." | |
::= { pfTablesAddrEntry 3 } | |
pfTablesAddrPrefix OBJECT-TYPE | |
SYNTAX InetAddressPrefixLength | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The CIDR netmask of this particular table entry." | |
::= { pfTablesAddrEntry 4 } | |
pfTablesAddrTZero OBJECT-TYPE | |
SYNTAX TimeTicks | |
UNITS "1/100th of a Second" | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The time passed since this entry's statistics were last | |
cleared, or the time passed since this entry was loaded | |
into the table, whichever is sooner." | |
::= { pfTablesAddrEntry 5 } | |
pfTablesAddrBytesInPass OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of inbound bytes passed as a result of this entry." | |
::= { pfTablesAddrEntry 6 } | |
pfTablesAddrBytesInBlock OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of inbound bytes blocked as a result of this entry." | |
::= { pfTablesAddrEntry 7 } | |
pfTablesAddrBytesOutPass OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of outbound bytes passed as a result of this entry." | |
::= { pfTablesAddrEntry 8 } | |
pfTablesAddrBytesOutBlock OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of outbound bytes blocked as a result of this entry." | |
::= { pfTablesAddrEntry 9 } | |
pfTablesAddrPktsInPass OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of inbound packets passed as a result of this entry." | |
::= { pfTablesAddrEntry 10 } | |
pfTablesAddrPktsInBlock OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of inbound packets blocked as a result of this entry." | |
::= { pfTablesAddrEntry 11 } | |
pfTablesAddrPktsOutPass OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of outbound packets passed as a result of this entry." | |
::= { pfTablesAddrEntry 12 } | |
pfTablesAddrPktsOutBlock OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of outbound packets blocked as a result of this | |
entry." | |
::= { pfTablesAddrEntry 13 } | |
-- -------------------------------------------------------------------------- | |
-- | |
-- Altq information | |
-- | |
pfAltqQueueNumber OBJECT-TYPE | |
SYNTAX Unsigned32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of queues in the active set." | |
::= { pfAltq 1 } | |
pfAltqQueueTable OBJECT-TYPE | |
SYNTAX SEQUENCE OF PfAltqQueueEntry | |
MAX-ACCESS not-accessible | |
STATUS current | |
DESCRIPTION | |
"Table containing the rules that are active on this system." | |
::= { pfAltq 2 } | |
pfAltqQueueEntry OBJECT-TYPE | |
SYNTAX PfAltqQueueEntry | |
MAX-ACCESS not-accessible | |
STATUS current | |
DESCRIPTION | |
"An entry in the pfAltqQueueTable table." | |
INDEX { pfAltqQueueIndex } | |
::= { pfAltqQueueTable 1 } | |
PfAltqQueueEntry ::= SEQUENCE { | |
pfAltqQueueIndex Integer32, | |
pfAltqQueueDescr DisplayString, | |
pfAltqQueueParent DisplayString, | |
pfAltqQueueScheduler INTEGER, | |
pfAltqQueueBandwidth Unsigned32, | |
pfAltqQueuePriority Integer32, | |
pfAltqQueueLimit Integer32 | |
} | |
pfAltqQueueIndex OBJECT-TYPE | |
SYNTAX Integer32 (1..2147483647) | |
MAX-ACCESS not-accessible | |
STATUS current | |
DESCRIPTION | |
"A unique value, greater than zero, for each queue." | |
::= { pfAltqQueueEntry 1 } | |
pfAltqQueueDescr OBJECT-TYPE | |
SYNTAX DisplayString (SIZE (0..32)) | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The name of the queue." | |
::= { pfAltqQueueEntry 2 } | |
pfAltqQueueParent OBJECT-TYPE | |
SYNTAX OCTET STRING | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Name of the queue's parent if it has one." | |
::= { pfAltqQueueEntry 3 } | |
pfAltqQueueScheduler OBJECT-TYPE | |
SYNTAX INTEGER { cbq(1), hfsc(8), priq(11) } | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Scheduler algorithm implemented by this queue." | |
::= { pfAltqQueueEntry 4 } | |
pfAltqQueueBandwidth OBJECT-TYPE | |
SYNTAX Unsigned32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Bandwitch assigned to this queue." | |
::= { pfAltqQueueEntry 5 } | |
pfAltqQueuePriority OBJECT-TYPE | |
SYNTAX Integer32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Priority level of the queue." | |
::= { pfAltqQueueEntry 6 } | |
pfAltqQueueLimit OBJECT-TYPE | |
SYNTAX Integer32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"Maximum number of packets in the queue." | |
::= { pfAltqQueueEntry 7 } | |
pfLabelsLblNumber OBJECT-TYPE | |
SYNTAX Integer32 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of labeled filter rules on this system." | |
::= { pfLabels 1 } | |
pfLabelsLblTable OBJECT-TYPE | |
SYNTAX SEQUENCE OF PfLabelsLblEntry | |
MAX-ACCESS not-accessible | |
STATUS current | |
DESCRIPTION | |
"Table of filter rules, index on pfLabelsLblIndex." | |
::= { pfLabels 2 } | |
pfLabelsLblEntry OBJECT-TYPE | |
SYNTAX PfLabelsLblEntry | |
MAX-ACCESS not-accessible | |
STATUS current | |
DESCRIPTION | |
"Any entry in the pfLabelsLblTable containing information | |
about a particular filter rule on the system." | |
INDEX { pfLabelsLblIndex } | |
::= { pfLabelsLblTable 1 } | |
PfLabelsLblEntry ::= SEQUENCE { | |
pfLabelsLblIndex Integer32, | |
pfLabelsLblName DisplayString, | |
pfLabelsLblEvals Counter64, | |
pfLabelsLblBytesIn Counter64, | |
pfLabelsLblBytesOut Counter64, | |
pfLabelsLblPktsIn Counter64, | |
pfLabelsLblPktsOut Counter64 | |
} | |
pfLabelsLblIndex OBJECT-TYPE | |
SYNTAX Integer32 (1..2147483647) | |
MAX-ACCESS not-accessible | |
STATUS current | |
DESCRIPTION | |
"A unique value, greater than zero, for each label." | |
::= { pfLabelsLblEntry 1 } | |
pfLabelsLblName OBJECT-TYPE | |
SYNTAX DisplayString (SIZE (0..32)) | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The name of the rule label." | |
::= { pfLabelsLblEntry 2 } | |
pfLabelsLblEvals OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of rule evaluations." | |
::= { pfLabelsLblEntry 3 } | |
pfLabelsLblBytesIn OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of incoming bytes matched by the rule." | |
::= { pfLabelsLblEntry 4 } | |
pfLabelsLblBytesOut OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of outgoing bytes matched by the rule." | |
::= { pfLabelsLblEntry 5 } | |
pfLabelsLblPktsIn OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of incoming packets matched by the rule." | |
::= { pfLabelsLblEntry 6 } | |
pfLabelsLblPktsOut OBJECT-TYPE | |
SYNTAX Counter64 | |
MAX-ACCESS read-only | |
STATUS current | |
DESCRIPTION | |
"The number of outgoing packets matched by the rule." | |
::= { pfLabelsLblEntry 7 } | |
END |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment