1-- 2-- ---------------------------------------------------------------------------- 3-- "THE BEER-WARE LICENSE" (Revision 42): 4-- <philip@FreeBSD.org> wrote this file. As long as you retain this notice you 5-- can do whatever you want with this stuff. If we meet some day, and you think 6-- this stuff is worth it, you can buy me a beer in return. -Philip Paeps 7-- ---------------------------------------------------------------------------- 8-- 9 10BEGEMOT-PF-MIB DEFINITIONS ::= BEGIN 11 12IMPORTS 13 MODULE-IDENTITY, OBJECT-TYPE, Counter64, Integer32, 14 TimeTicks, Unsigned32 15 FROM SNMPv2-SMI 16 TruthValue 17 FROM SNMPv2-TC 18 InetAddress, InetAddressType, InetAddressPrefixLength 19 FROM INET-ADDRESS-MIB 20 begemot 21 FROM BEGEMOT-MIB; 22 23begemotPf MODULE-IDENTITY 24 LAST-UPDATED "201003180000Z" 25 ORGANIZATION "NixSys BVBA" 26 CONTACT-INFO 27 " Philip Paeps 28 29 Postal: NixSys BVBA 30 Louizastraat 14 31 BE-2800 Mechelen 32 Belgium 33 34 E-Mail: philip@FreeBSD.org" 35 DESCRIPTION 36 "The Begemot MIB for the pf packet filter." 37 REVISION "201003180000Z" 38 DESCRIPTION 39 "Modified pfTablesAddrEntry to support IPv6 40 addresses - added pfTablesAddrNetType column 41 and modified type of pfTablesAddrNet to 42 InetAddress." 43 REVISION "200912050000Z" 44 DESCRIPTION 45 "Added support for retrieving counters of labeled 46 pf filter rules via pfLabelspfLabels subtree." 47 REVISION "200501240000Z" 48 DESCRIPTION 49 "Initial revision." 50 51 ::= { begemot 200 } 52 53begemotPfObjects OBJECT IDENTIFIER ::= { begemotPf 1 } 54 55-- -------------------------------------------------------------------------- 56 57pfStatus OBJECT IDENTIFIER ::= { begemotPfObjects 1 } 58pfCounter OBJECT IDENTIFIER ::= { begemotPfObjects 2 } 59pfStateTable OBJECT IDENTIFIER ::= { begemotPfObjects 3 } 60pfSrcNodes OBJECT IDENTIFIER ::= { begemotPfObjects 4 } 61pfLimits OBJECT IDENTIFIER ::= { begemotPfObjects 5 } 62pfTimeouts OBJECT IDENTIFIER ::= { begemotPfObjects 6 } 63pfLogInterface OBJECT IDENTIFIER ::= { begemotPfObjects 7 } 64pfInterfaces OBJECT IDENTIFIER ::= { begemotPfObjects 8 } 65pfTables OBJECT IDENTIFIER ::= { begemotPfObjects 9 } 66pfAltq OBJECT IDENTIFIER ::= { begemotPfObjects 10 } 67pfLabels OBJECT IDENTIFIER ::= { begemotPfObjects 11 } 68 69-- -------------------------------------------------------------------------- 70 71-- 72-- status information 73-- 74 75pfStatusRunning OBJECT-TYPE 76 SYNTAX TruthValue 77 MAX-ACCESS read-only 78 STATUS current 79 DESCRIPTION 80 "True if pf is currently enabled." 81 ::= { pfStatus 1 } 82 83pfStatusRuntime OBJECT-TYPE 84 SYNTAX TimeTicks 85 UNITS "1/100th of a Second" 86 MAX-ACCESS read-only 87 STATUS current 88 DESCRIPTION 89 "Indicates how long pf has been enabled. If pf is not currently 90 enabled, indicates how long it has been disabled. If pf has not 91 been enabled or disabled since the system was started, the value 92 will be 0." 93 ::= { pfStatus 2 } 94 95pfStatusDebug OBJECT-TYPE 96 SYNTAX INTEGER { none(0), urgent(1), misc(2), loud(3) } 97 MAX-ACCESS read-only 98 STATUS current 99 DESCRIPTION 100 "Indicates the debug level at which pf is running." 101 ::= { pfStatus 3 } 102 103pfStatusHostId OBJECT-TYPE 104 SYNTAX OCTET STRING 105 MAX-ACCESS read-only 106 STATUS current 107 DESCRIPTION 108 "The (unique) host identifier of the machine running pf." 109 ::= { pfStatus 4 } 110 111-- -------------------------------------------------------------------------- 112 113-- 114-- counters 115-- 116 117pfCounterMatch OBJECT-TYPE 118 SYNTAX Counter64 119 MAX-ACCESS read-only 120 STATUS current 121 DESCRIPTION 122 "Number of packets that matched a filter rule." 123 ::= { pfCounter 1 } 124 125pfCounterBadOffset OBJECT-TYPE 126 SYNTAX Counter64 127 MAX-ACCESS read-only 128 STATUS current 129 DESCRIPTION 130 "Number of packets with bad offset." 131 ::= { pfCounter 2 } 132 133pfCounterFragment OBJECT-TYPE 134 SYNTAX Counter64 135 MAX-ACCESS read-only 136 STATUS current 137 DESCRIPTION 138 "Number of fragmented packets." 139 ::= { pfCounter 3 } 140 141pfCounterShort OBJECT-TYPE 142 SYNTAX Counter64 143 MAX-ACCESS read-only 144 STATUS current 145 DESCRIPTION 146 "Number of short packets." 147 ::= { pfCounter 4 } 148 149pfCounterNormalize OBJECT-TYPE 150 SYNTAX Counter64 151 MAX-ACCESS read-only 152 STATUS current 153 DESCRIPTION 154 "Number of normalized packets." 155 ::= { pfCounter 5 } 156 157pfCounterMemDrop OBJECT-TYPE 158 SYNTAX Counter64 159 MAX-ACCESS read-only 160 STATUS current 161 DESCRIPTION 162 "Number of packets dropped due to memory limitations." 163 ::= { pfCounter 6 } 164 165-- -------------------------------------------------------------------------- 166 167-- 168-- state table 169-- 170 171pfStateTableCount OBJECT-TYPE 172 SYNTAX Unsigned32 173 MAX-ACCESS read-only 174 STATUS current 175 DESCRIPTION 176 "Number of entries in the state table." 177 ::= { pfStateTable 1 } 178 179pfStateTableSearches OBJECT-TYPE 180 SYNTAX Counter64 181 MAX-ACCESS read-only 182 STATUS current 183 DESCRIPTION 184 "Number of searches against the state table." 185 ::= { pfStateTable 2 } 186 187pfStateTableInserts OBJECT-TYPE 188 SYNTAX Counter64 189 MAX-ACCESS read-only 190 STATUS current 191 DESCRIPTION 192 "Number of entries inserted into the state table." 193 ::= { pfStateTable 3 } 194 195pfStateTableRemovals OBJECT-TYPE 196 SYNTAX Counter64 197 MAX-ACCESS read-only 198 STATUS current 199 DESCRIPTION 200 "Number of entries removed from the state table." 201 ::= { pfStateTable 4 } 202 203-- -------------------------------------------------------------------------- 204 205-- 206-- source nodes 207-- 208 209pfSrcNodesCount OBJECT-TYPE 210 SYNTAX Unsigned32 211 MAX-ACCESS read-only 212 STATUS current 213 DESCRIPTION 214 "Number of entries in the source tracking table." 215 ::= { pfSrcNodes 1 } 216 217pfSrcNodesSearches OBJECT-TYPE 218 SYNTAX Counter64 219 MAX-ACCESS read-only 220 STATUS current 221 DESCRIPTION 222 "Number of searches against the source tracking table." 223 ::= { pfSrcNodes 2 } 224 225pfSrcNodesInserts OBJECT-TYPE 226 SYNTAX Counter64 227 MAX-ACCESS read-only 228 STATUS current 229 DESCRIPTION 230 "Number of entries inserted into the source tracking table." 231 ::= { pfSrcNodes 3 } 232 233pfSrcNodesRemovals OBJECT-TYPE 234 SYNTAX Counter64 235 MAX-ACCESS read-only 236 STATUS current 237 DESCRIPTION 238 "Number of entries removed from the source tracking table." 239 ::= { pfSrcNodes 4 } 240 241-- -------------------------------------------------------------------------- 242 243-- 244-- limits 245-- 246 247pfLimitsStates OBJECT-TYPE 248 SYNTAX Unsigned32 249 MAX-ACCESS read-only 250 STATUS current 251 DESCRIPTION 252 "Maximum number of 'keep state' rules in the ruleset." 253 ::= { pfLimits 1 } 254 255pfLimitsSrcNodes OBJECT-TYPE 256 SYNTAX Unsigned32 257 MAX-ACCESS read-only 258 STATUS current 259 DESCRIPTION 260 "Maximum number of 'sticky-address' or 'source-track' rules 261 in the ruleset." 262 ::= { pfLimits 2 } 263 264pfLimitsFrags OBJECT-TYPE 265 SYNTAX Unsigned32 266 MAX-ACCESS read-only 267 STATUS current 268 DESCRIPTION 269 "Maximum number of 'scrub' rules in the ruleset." 270 ::= { pfLimits 3 } 271 272-- -------------------------------------------------------------------------- 273 274-- 275-- timeouts 276-- 277 278pfTimeoutsTcpFirst OBJECT-TYPE 279 SYNTAX Integer32 280 MAX-ACCESS read-only 281 STATUS current 282 DESCRIPTION 283 "State after the first packet in a connection." 284 ::= { pfTimeouts 1 } 285 286pfTimeoutsTcpOpening OBJECT-TYPE 287 SYNTAX Integer32 288 MAX-ACCESS read-only 289 STATUS current 290 DESCRIPTION 291 "State before the destination host ever sends a packet." 292 ::= { pfTimeouts 2 } 293 294pfTimeoutsTcpEstablished OBJECT-TYPE 295 SYNTAX Integer32 296 MAX-ACCESS read-only 297 STATUS current 298 DESCRIPTION 299 "The fully established state." 300 ::= { pfTimeouts 3 } 301 302pfTimeoutsTcpClosing OBJECT-TYPE 303 SYNTAX Integer32 304 MAX-ACCESS read-only 305 STATUS current 306 DESCRIPTION 307 "State after the first FIN has been sent." 308 ::= { pfTimeouts 4 } 309 310pfTimeoutsTcpFinWait OBJECT-TYPE 311 SYNTAX Integer32 312 MAX-ACCESS read-only 313 STATUS current 314 DESCRIPTION 315 "State after both FINs have been exchanged and the 316 connection is closed." 317 ::= { pfTimeouts 5 } 318 319pfTimeoutsTcpClosed OBJECT-TYPE 320 SYNTAX Integer32 321 MAX-ACCESS read-only 322 STATUS current 323 DESCRIPTION 324 "State after one endpoint sends an RST." 325 ::= { pfTimeouts 6 } 326 327pfTimeoutsUdpFirst OBJECT-TYPE 328 SYNTAX Integer32 329 MAX-ACCESS read-only 330 STATUS current 331 DESCRIPTION 332 "State after the first packet." 333 ::= { pfTimeouts 7 } 334 335pfTimeoutsUdpSingle OBJECT-TYPE 336 SYNTAX Integer32 337 MAX-ACCESS read-only 338 STATUS current 339 DESCRIPTION 340 "State if the source host sends more than one packet but 341 the destination host has never sent one back." 342 ::= { pfTimeouts 8 } 343 344pfTimeoutsUdpMultiple OBJECT-TYPE 345 SYNTAX Integer32 346 MAX-ACCESS read-only 347 STATUS current 348 DESCRIPTION 349 "State if both hosts have sent packets." 350 ::= { pfTimeouts 9 } 351 352pfTimeoutsIcmpFirst OBJECT-TYPE 353 SYNTAX Integer32 354 MAX-ACCESS read-only 355 STATUS current 356 DESCRIPTION 357 "State after the first packet." 358 ::= { pfTimeouts 10 } 359 360pfTimeoutsIcmpError OBJECT-TYPE 361 SYNTAX Integer32 362 MAX-ACCESS read-only 363 STATUS current 364 DESCRIPTION 365 "State after an ICMP error came back in response to an 366 ICMP packet." 367 ::= { pfTimeouts 11 } 368 369pfTimeoutsOtherFirst OBJECT-TYPE 370 SYNTAX Integer32 371 MAX-ACCESS read-only 372 STATUS current 373 DESCRIPTION 374 "State after the first packet." 375 ::= { pfTimeouts 12 } 376 377pfTimeoutsOtherSingle OBJECT-TYPE 378 SYNTAX Integer32 379 MAX-ACCESS read-only 380 STATUS current 381 DESCRIPTION 382 "State if the source host sends more than one packet but 383 the destination host has never sent one back." 384 ::= { pfTimeouts 13 } 385 386pfTimeoutsOtherMultiple OBJECT-TYPE 387 SYNTAX Integer32 388 MAX-ACCESS read-only 389 STATUS current 390 DESCRIPTION 391 "State if both hosts have sent packets." 392 ::= { pfTimeouts 14 } 393 394pfTimeoutsFragment OBJECT-TYPE 395 SYNTAX Integer32 396 MAX-ACCESS read-only 397 STATUS current 398 DESCRIPTION 399 "Seconds before an unassembled fragment is expired." 400 ::= { pfTimeouts 15 } 401 402pfTimeoutsInterval OBJECT-TYPE 403 SYNTAX Integer32 404 MAX-ACCESS read-only 405 STATUS current 406 DESCRIPTION 407 "Interval between purging expired states and fragments." 408 ::= { pfTimeouts 16 } 409 410pfTimeoutsAdaptiveStart OBJECT-TYPE 411 SYNTAX Integer32 412 MAX-ACCESS read-only 413 STATUS current 414 DESCRIPTION 415 "When the number of state entries exceeds this value, 416 adaptive scaling begins." 417 ::= { pfTimeouts 17 } 418 419pfTimeoutsAdaptiveEnd OBJECT-TYPE 420 SYNTAX Integer32 421 MAX-ACCESS read-only 422 STATUS current 423 DESCRIPTION 424 "When reaching this number of state entries, all timeout 425 values become zero, effectively purging all state entries 426 immediately." 427 ::= { pfTimeouts 18 } 428 429pfTimeoutsSrcNode OBJECT-TYPE 430 SYNTAX Integer32 431 MAX-ACCESS read-only 432 STATUS current 433 DESCRIPTION 434 "Length of time to retain a source tracking entry after 435 the last state expires." 436 ::= { pfTimeouts 19 } 437 438-- -------------------------------------------------------------------------- 439 440-- 441-- log interface 442-- 443 444pfLogInterfaceName OBJECT-TYPE 445 SYNTAX OCTET STRING 446 MAX-ACCESS read-only 447 STATUS current 448 DESCRIPTION 449 "The name of the interface configured with 'set loginterface'. 450 If no interface has been configured, the object will be empty." 451 ::= { pfLogInterface 1 } 452 453pfLogInterfaceIp4BytesIn OBJECT-TYPE 454 SYNTAX Counter64 455 MAX-ACCESS read-only 456 STATUS current 457 DESCRIPTION 458 "Number of IPv4 bytes passed in on the loginterface." 459 ::= { pfLogInterface 2 } 460 461pfLogInterfaceIp4BytesOut OBJECT-TYPE 462 SYNTAX Counter64 463 MAX-ACCESS read-only 464 STATUS current 465 DESCRIPTION 466 "Number of IPv4 bytes passed out on the loginterface." 467 ::= { pfLogInterface 3 } 468 469pfLogInterfaceIp4PktsInPass OBJECT-TYPE 470 SYNTAX Counter64 471 MAX-ACCESS read-only 472 STATUS current 473 DESCRIPTION 474 "Number of IPv4 packets passed in on the loginterface." 475 ::= { pfLogInterface 4 } 476 477pfLogInterfaceIp4PktsInDrop OBJECT-TYPE 478 SYNTAX Counter64 479 MAX-ACCESS read-only 480 STATUS current 481 DESCRIPTION 482 "Number of IPv4 packets dropped coming in on the loginterface." 483 ::= { pfLogInterface 5 } 484 485pfLogInterfaceIp4PktsOutPass OBJECT-TYPE 486 SYNTAX Counter64 487 MAX-ACCESS read-only 488 STATUS current 489 DESCRIPTION 490 "Number of IPv4 packets passed out on the loginterface." 491 ::= { pfLogInterface 6 } 492 493pfLogInterfaceIp4PktsOutDrop OBJECT-TYPE 494 SYNTAX Counter64 495 MAX-ACCESS read-only 496 STATUS current 497 DESCRIPTION 498 "Number of IPv4 packets dropped going out on the loginterface." 499 ::= { pfLogInterface 7 } 500 501pfLogInterfaceIp6BytesIn OBJECT-TYPE 502 SYNTAX Counter64 503 MAX-ACCESS read-only 504 STATUS current 505 DESCRIPTION 506 "Number of IPv6 bytes passed in on the loginterface." 507 ::= { pfLogInterface 8 } 508 509pfLogInterfaceIp6BytesOut OBJECT-TYPE 510 SYNTAX Counter64 511 MAX-ACCESS read-only 512 STATUS current 513 DESCRIPTION 514 "Number of IPv6 bytes passed out on the loginterface." 515 ::= { pfLogInterface 9 } 516 517pfLogInterfaceIp6PktsInPass OBJECT-TYPE 518 SYNTAX Counter64 519 MAX-ACCESS read-only 520 STATUS current 521 DESCRIPTION 522 "Number of IPv6 packets passed in on the loginterface." 523 ::= { pfLogInterface 10 } 524 525pfLogInterfaceIp6PktsInDrop OBJECT-TYPE 526 SYNTAX Counter64 527 MAX-ACCESS read-only 528 STATUS current 529 DESCRIPTION 530 "Number of IPv6 packets dropped coming in on the loginterface." 531 ::= { pfLogInterface 11 } 532 533pfLogInterfaceIp6PktsOutPass OBJECT-TYPE 534 SYNTAX Counter64 535 MAX-ACCESS read-only 536 STATUS current 537 DESCRIPTION 538 "Number of IPv6 packets passed out on the loginterface." 539 ::= { pfLogInterface 12 } 540 541pfLogInterfaceIp6PktsOutDrop OBJECT-TYPE 542 SYNTAX Counter64 543 MAX-ACCESS read-only 544 STATUS current 545 DESCRIPTION 546 "Number of IPv6 packets dropped going out on the loginterface." 547 ::= { pfLogInterface 13 } 548 549-- -------------------------------------------------------------------------- 550 551-- 552-- interfaces 553-- 554 555pfInterfacesIfNumber OBJECT-TYPE 556 SYNTAX Integer32 557 MAX-ACCESS read-only 558 STATUS current 559 DESCRIPTION 560 "The number of network interfaces on this system." 561 ::= { pfInterfaces 1 } 562 563pfInterfacesIfTable OBJECT-TYPE 564 SYNTAX SEQUENCE OF PfInterfacesIfEntry 565 MAX-ACCESS not-accessible 566 STATUS current 567 DESCRIPTION 568 "Table of network interfaces, indexed on pfInterfacesIfNumber." 569 ::= { pfInterfaces 2 } 570 571pfInterfacesIfEntry OBJECT-TYPE 572 SYNTAX PfInterfacesIfEntry 573 MAX-ACCESS not-accessible 574 STATUS current 575 DESCRIPTION 576 "An entry in the pfInterfacesIfTable containing information 577 about a particular network interface in the machine." 578 INDEX { pfInterfacesIfIndex } 579 ::= { pfInterfacesIfTable 1 } 580 581PfInterfacesIfEntry ::= SEQUENCE { 582 pfInterfacesIfIndex Integer32, 583 pfInterfacesIfDescr OCTET STRING, 584 pfInterfacesIfType INTEGER, 585 pfInterfacesIfTZero TimeTicks, 586 pfInterfacesIfRefsState Null, 587 pfInterfacesIfRefsRule Unsigned32, 588 pfInterfacesIf4BytesInPass Counter64, 589 pfInterfacesIf4BytesInBlock Counter64, 590 pfInterfacesIf4BytesOutPass Counter64, 591 pfInterfacesIf4BytesOutBlock Counter64, 592 pfInterfacesIf4PktsInPass Counter64, 593 pfInterfacesIf4PktsInBlock Counter64, 594 pfInterfacesIf4PktsOutPass Counter64, 595 pfInterfacesIf4PktsOutBlock Counter64, 596 pfInterfacesIf6BytesInPass Counter64, 597 pfInterfacesIf6BytesInBlock Counter64, 598 pfInterfacesIf6BytesOutPass Counter64, 599 pfInterfacesIf6BytesOutBlock Counter64, 600 pfInterfacesIf6PktsInPass Counter64, 601 pfInterfacesIf6PktsInBlock Counter64, 602 pfInterfacesIf6PktsOutPass Counter64, 603 pfInterfacesIf6PktsOutBlock Counter64 604} 605 606pfInterfacesIfIndex OBJECT-TYPE 607 SYNTAX Integer32 (1..2147483647) 608 MAX-ACCESS not-accessible 609 STATUS current 610 DESCRIPTION 611 "A unique value, greater than zero, for each interface." 612 ::= { pfInterfacesIfEntry 1 } 613 614pfInterfacesIfDescr OBJECT-TYPE 615 SYNTAX OCTET STRING 616 MAX-ACCESS read-only 617 STATUS current 618 DESCRIPTION 619 "The name of the interface." 620 ::= { pfInterfacesIfEntry 2 } 621 622pfInterfacesIfType OBJECT-TYPE 623 SYNTAX INTEGER { group(0), instance(1), detached(2) } 624 MAX-ACCESS read-only 625 STATUS current 626 DESCRIPTION 627 "Indicates whether the interface is a group inteface, an 628 interface instance, or whether it has been removed or 629 destroyed." 630 ::= { pfInterfacesIfEntry 3 } 631 632pfInterfacesIfTZero OBJECT-TYPE 633 SYNTAX TimeTicks 634 UNITS "1/100th of a Second" 635 MAX-ACCESS read-only 636 STATUS current 637 DESCRIPTION 638 "Time since statistics were last reset or since the 639 interface was loaded." 640 ::= { pfInterfacesIfEntry 4 } 641 642pfInterfacesIfRefsState OBJECT-TYPE 643 SYNTAX Unsigned32 644 MAX-ACCESS read-only 645 STATUS current 646 DESCRIPTION 647 "The number of state and/or source track entries referencing 648 this interface." 649 ::= { pfInterfacesIfEntry 5 } 650 651pfInterfacesIfRefsRule OBJECT-TYPE 652 SYNTAX Unsigned32 653 MAX-ACCESS read-only 654 STATUS current 655 DESCRIPTION 656 "The number of rules referencing this interface." 657 ::= { pfInterfacesIfEntry 6 } 658 659pfInterfacesIf4BytesInPass OBJECT-TYPE 660 SYNTAX Counter64 661 MAX-ACCESS read-only 662 STATUS current 663 DESCRIPTION 664 "The number of IPv4 bytes passed coming in on this interface." 665 ::= { pfInterfacesIfEntry 7 } 666 667pfInterfacesIf4BytesInBlock OBJECT-TYPE 668 SYNTAX Counter64 669 MAX-ACCESS read-only 670 STATUS current 671 DESCRIPTION 672 "The number of IPv4 bytes blocked coming in on this interface." 673 ::= { pfInterfacesIfEntry 8 } 674 675pfInterfacesIf4BytesOutPass OBJECT-TYPE 676 SYNTAX Counter64 677 MAX-ACCESS read-only 678 STATUS current 679 DESCRIPTION 680 "The number of IPv4 bytes passed going out on this interface." 681 ::= { pfInterfacesIfEntry 9 } 682 683pfInterfacesIf4BytesOutBlock OBJECT-TYPE 684 SYNTAX Counter64 685 MAX-ACCESS read-only 686 STATUS current 687 DESCRIPTION 688 "The number of IPv4 bytes blocked going out on this interface." 689 ::= { pfInterfacesIfEntry 10 } 690 691pfInterfacesIf4PktsInPass OBJECT-TYPE 692 SYNTAX Counter64 693 MAX-ACCESS read-only 694 STATUS current 695 DESCRIPTION 696 "The number of IPv4 packets passed coming in on this interface." 697 ::= { pfInterfacesIfEntry 11 } 698 699pfInterfacesIf4PktsInBlock OBJECT-TYPE 700 SYNTAX Counter64 701 MAX-ACCESS read-only 702 STATUS current 703 DESCRIPTION 704 "The number of IPv4 packets blocked coming in on this interface." 705 ::= { pfInterfacesIfEntry 12 } 706 707pfInterfacesIf4PktsOutPass OBJECT-TYPE 708 SYNTAX Counter64 709 MAX-ACCESS read-only 710 STATUS current 711 DESCRIPTION 712 "The number of IPv4 packets passed going out on this interface." 713 ::= { pfInterfacesIfEntry 13 } 714 715pfInterfacesIf4PktsOutBlock OBJECT-TYPE 716 SYNTAX Counter64 717 MAX-ACCESS read-only 718 STATUS current 719 DESCRIPTION 720 "The number of IPv4 packets blocked going out on this interface." 721 ::= { pfInterfacesIfEntry 14 } 722 723pfInterfacesIf6BytesInPass OBJECT-TYPE 724 SYNTAX Counter64 725 MAX-ACCESS read-only 726 STATUS current 727 DESCRIPTION 728 "The number of IPv6 bytes passed coming in on this interface." 729 ::= { pfInterfacesIfEntry 15 } 730 731pfInterfacesIf6BytesInBlock OBJECT-TYPE 732 SYNTAX Counter64 733 MAX-ACCESS read-only 734 STATUS current 735 DESCRIPTION 736 "The number of IPv6 bytes blocked coming in on this interface." 737 ::= { pfInterfacesIfEntry 16 } 738 739pfInterfacesIf6BytesOutPass OBJECT-TYPE 740 SYNTAX Counter64 741 MAX-ACCESS read-only 742 STATUS current 743 DESCRIPTION 744 "The number of IPv6 bytes passed going out on this interface." 745 ::= { pfInterfacesIfEntry 17 } 746 747pfInterfacesIf6BytesOutBlock OBJECT-TYPE 748 SYNTAX Counter64 749 MAX-ACCESS read-only 750 STATUS current 751 DESCRIPTION 752 "The number of IPv6 bytes blocked going out on this interface." 753 ::= { pfInterfacesIfEntry 18 } 754 755 756pfInterfacesIf6PktsInPass OBJECT-TYPE 757 SYNTAX Counter64 758 MAX-ACCESS read-only 759 STATUS current 760 DESCRIPTION 761 "The number of IPv6 packets passed coming in on this interface." 762 ::= { pfInterfacesIfEntry 19 } 763 764pfInterfacesIf6PktsInBlock OBJECT-TYPE 765 SYNTAX Counter64 766 MAX-ACCESS read-only 767 STATUS current 768 DESCRIPTION 769 "The number of IPv6 packets blocked coming in on this interface." 770 ::= { pfInterfacesIfEntry 20 } 771 772pfInterfacesIf6PktsOutPass OBJECT-TYPE 773 SYNTAX Counter64 774 MAX-ACCESS read-only 775 STATUS current 776 DESCRIPTION 777 "The number of IPv6 packets passed going out on this interface." 778 ::= { pfInterfacesIfEntry 21 } 779 780pfInterfacesIf6PktsOutBlock OBJECT-TYPE 781 SYNTAX Counter64 782 MAX-ACCESS read-only 783 STATUS current 784 DESCRIPTION 785 "The number of IPv6 packets blocked going out on this interface." 786 ::= { pfInterfacesIfEntry 22 } 787 788-- -------------------------------------------------------------------------- 789 790-- 791-- tables 792-- 793 794pfTablesTblNumber OBJECT-TYPE 795 SYNTAX Integer32 796 MAX-ACCESS read-only 797 STATUS current 798 DESCRIPTION 799 "The number of tables on this system." 800 ::= { pfTables 1 } 801 802pfTablesTblTable OBJECT-TYPE 803 SYNTAX SEQUENCE OF PfTablesTblEntry 804 MAX-ACCESS not-accessible 805 STATUS current 806 DESCRIPTION 807 "Table of tables, index on pfTablesTblIndex." 808 ::= { pfTables 2 } 809 810pfTablesTblEntry OBJECT-TYPE 811 SYNTAX PfTablesTblEntry 812 MAX-ACCESS not-accessible 813 STATUS current 814 DESCRIPTION 815 "Any entry in the pfTablesTblTable containing information 816 about a particular table on the system." 817 INDEX { pfTablesTblIndex } 818 ::= { pfTablesTblTable 1 } 819 820PfTablesTblEntry ::= SEQUENCE { 821 pfTablesTblIndex Integer32, 822 pfTablesTblDescr OCTET STRING, 823 pfTablesTblCount Integer32, 824 pfTablesTblTZero TimeTicks, 825 pfTablesTblRefsAnchor Integer32, 826 pfTablesTblRefsRule Integer32, 827 pfTablesTblEvalMatch Counter64, 828 pfTablesTblEvalNoMatch Counter64, 829 pfTablesTblBytesInPass Counter64, 830 pfTablesTblBytesInBlock Counter64, 831 pfTablesTblBytesInXPass Counter64, 832 pfTablesTblBytesOutPass Counter64, 833 pfTablesTblBytesOutBlock Counter64, 834 pfTablesTblBytesOutXPass Counter64, 835 pfTablesTblPktsInPass Counter64, 836 pfTablesTblPktsInBlock Counter64, 837 pfTablesTblPktsInXPass Counter64, 838 pfTablesTblPktsOutPass Counter64, 839 pfTablesTblPktsOutBlock Counter64, 840 pfTablesTblPktsOutXPass Counter64 841} 842 843pfTablesTblIndex OBJECT-TYPE 844 SYNTAX Integer32 (1..2147483647) 845 MAX-ACCESS not-accessible 846 STATUS current 847 DESCRIPTION 848 "A unique value, greater than zero, for each table." 849 ::= { pfTablesTblEntry 1 } 850 851pfTablesTblDescr OBJECT-TYPE 852 SYNTAX OCTET STRING 853 MAX-ACCESS read-only 854 STATUS current 855 DESCRIPTION 856 "The name of the table." 857 ::= { pfTablesTblEntry 2 } 858 859pfTablesTblCount OBJECT-TYPE 860 SYNTAX Integer32 861 MAX-ACCESS read-only 862 STATUS current 863 DESCRIPTION 864 "The number of addresses in the table." 865 ::= { pfTablesTblEntry 3 } 866 867pfTablesTblTZero OBJECT-TYPE 868 SYNTAX TimeTicks 869 UNITS "1/100th of a Second" 870 MAX-ACCESS read-only 871 STATUS current 872 DESCRIPTION 873 "The time passed since the statistics of this table were last 874 cleared or the time since this table was loaded, whichever is 875 sooner." 876 ::= { pfTablesTblEntry 4 } 877 878pfTablesTblRefsAnchor OBJECT-TYPE 879 SYNTAX Integer32 880 MAX-ACCESS read-only 881 STATUS current 882 DESCRIPTION 883 "The number of anchors referencing this table." 884 ::= { pfTablesTblEntry 5 } 885 886pfTablesTblRefsRule OBJECT-TYPE 887 SYNTAX Integer32 888 MAX-ACCESS read-only 889 STATUS current 890 DESCRIPTION 891 "The number of rules referencing this table." 892 ::= { pfTablesTblEntry 6 } 893 894pfTablesTblEvalMatch OBJECT-TYPE 895 SYNTAX Counter64 896 MAX-ACCESS read-only 897 STATUS current 898 DESCRIPTION 899 "The number of evaluations returning a match." 900 ::= { pfTablesTblEntry 7 } 901 902pfTablesTblEvalNoMatch OBJECT-TYPE 903 SYNTAX Counter64 904 MAX-ACCESS read-only 905 STATUS current 906 DESCRIPTION 907 "The number of evaluations not returning a match." 908 ::= { pfTablesTblEntry 8 } 909 910pfTablesTblBytesInPass OBJECT-TYPE 911 SYNTAX Counter64 912 MAX-ACCESS read-only 913 STATUS current 914 DESCRIPTION 915 "The number of bytes passed in matching the table." 916 ::= { pfTablesTblEntry 9 } 917 918pfTablesTblBytesInBlock OBJECT-TYPE 919 SYNTAX Counter64 920 MAX-ACCESS read-only 921 STATUS current 922 DESCRIPTION 923 "The number of bytes blocked coming in matching the table." 924 ::= { pfTablesTblEntry 10 } 925 926pfTablesTblBytesInXPass OBJECT-TYPE 927 SYNTAX Counter64 928 MAX-ACCESS read-only 929 STATUS current 930 DESCRIPTION 931 "The number of bytes statefully passed in where the state 932 entry refers to the table, but the table no longer contains 933 the address in question." 934 ::= { pfTablesTblEntry 11 } 935 936pfTablesTblBytesOutPass OBJECT-TYPE 937 SYNTAX Counter64 938 MAX-ACCESS read-only 939 STATUS current 940 DESCRIPTION 941 "The number of bytes passed out matching the table." 942 ::= { pfTablesTblEntry 12 } 943 944pfTablesTblBytesOutBlock OBJECT-TYPE 945 SYNTAX Counter64 946 MAX-ACCESS read-only 947 STATUS current 948 DESCRIPTION 949 "The number of bytes blocked going out matching the table." 950 ::= { pfTablesTblEntry 13 } 951 952pfTablesTblBytesOutXPass OBJECT-TYPE 953 SYNTAX Counter64 954 MAX-ACCESS read-only 955 STATUS current 956 DESCRIPTION 957 "The number of bytes statefully passed out where the state 958 entry refers to the table, but the table no longer contains 959 the address in question." 960 ::= { pfTablesTblEntry 14 } 961 962pfTablesTblPktsInPass OBJECT-TYPE 963 SYNTAX Counter64 964 MAX-ACCESS read-only 965 STATUS current 966 DESCRIPTION 967 "The number of packets passed in matching the table." 968 ::= { pfTablesTblEntry 15 } 969 970pfTablesTblPktsInBlock OBJECT-TYPE 971 SYNTAX Counter64 972 MAX-ACCESS read-only 973 STATUS current 974 DESCRIPTION 975 "The number of packets blocked coming in matching the table." 976 ::= { pfTablesTblEntry 16 } 977 978pfTablesTblPktsInXPass OBJECT-TYPE 979 SYNTAX Counter64 980 MAX-ACCESS read-only 981 STATUS current 982 DESCRIPTION 983 "The number of packets statefully passed in where the state 984 entry refers to the table, but the table no longer contains 985 the address in question." 986 ::= { pfTablesTblEntry 17 } 987 988pfTablesTblPktsOutPass OBJECT-TYPE 989 SYNTAX Counter64 990 MAX-ACCESS read-only 991 STATUS current 992 DESCRIPTION 993 "The number of packets passed out matching the table." 994 ::= { pfTablesTblEntry 18 } 995 996pfTablesTblPktsOutBlock OBJECT-TYPE 997 SYNTAX Counter64 998 MAX-ACCESS read-only 999 STATUS current 1000 DESCRIPTION 1001 "The number of packets blocked going out matching the table." 1002 ::= { pfTablesTblEntry 19 } 1003 1004pfTablesTblPktsOutXPass OBJECT-TYPE 1005 SYNTAX Counter64 1006 MAX-ACCESS read-only 1007 STATUS current 1008 DESCRIPTION 1009 "The number of packets statefully passed out where the state 1010 entry refers to the table, but the table no longer contains 1011 the address in question." 1012 ::= { pfTablesTblEntry 20 } 1013 1014pfTablesAddrTable OBJECT-TYPE 1015 SYNTAX SEQUENCE OF PfTablesAddrEntry 1016 MAX-ACCESS not-accessible 1017 STATUS current 1018 DESCRIPTION 1019 "Table of addresses from every table on the system." 1020 ::= { pfTables 3 } 1021 1022pfTablesAddrEntry OBJECT-TYPE 1023 SYNTAX PfTablesAddrEntry 1024 MAX-ACCESS not-accessible 1025 STATUS current 1026 DESCRIPTION 1027 "An entry in the pfTablesAddrTable containing information 1028 about a particular entry in a table." 1029 INDEX { pfTablesAddrIndex } 1030 ::= { pfTablesAddrTable 1 } 1031 1032PfTablesAddrEntry ::= SEQUENCE { 1033 pfTablesAddrIndex Integer32, 1034 pfTablesAddrNetType InetAddressType, 1035 pfTablesAddrNet InetAddress, 1036 pfTablesAddrPrefix InetAddressPrefixLength, 1037 pfTablesAddrTZero TimeTicks, 1038 pfTablesAddrBytesInPass Counter64, 1039 pfTablesAddrBytesInBlock Counter64, 1040 pfTablesAddrBytesOutPass Counter64, 1041 pfTablesAddrBytesOutBlock Counter64, 1042 pfTablesAddrPktsInPass Counter64, 1043 pfTablesAddrPktsInBlock Counter64, 1044 pfTablesAddrPktsOutPass Counter64, 1045 pfTablesAddrPktsOutBlock Counter64 1046} 1047 1048pfTablesAddrIndex OBJECT-TYPE 1049 SYNTAX Integer32 (1..2147483647) 1050 MAX-ACCESS not-accessible 1051 STATUS current 1052 DESCRIPTION 1053 "A unique value, greater than zero, for each address." 1054 ::= { pfTablesAddrEntry 1 } 1055 1056pfTablesAddrNetType OBJECT-TYPE 1057 SYNTAX InetAddressType 1058 MAX-ACCESS read-only 1059 STATUS current 1060 DESCRIPTION 1061 "The type of address in the corresponding pfTablesAddrNet object." 1062 ::= { pfTablesAddrEntry 2 } 1063 1064pfTablesAddrNet OBJECT-TYPE 1065 SYNTAX InetAddress 1066 MAX-ACCESS read-only 1067 STATUS current 1068 DESCRIPTION 1069 "The IP address of this particular table entry." 1070 ::= { pfTablesAddrEntry 3 } 1071 1072pfTablesAddrPrefix OBJECT-TYPE 1073 SYNTAX InetAddressPrefixLength 1074 MAX-ACCESS read-only 1075 STATUS current 1076 DESCRIPTION 1077 "The CIDR netmask of this particular table entry." 1078 ::= { pfTablesAddrEntry 4 } 1079 1080pfTablesAddrTZero OBJECT-TYPE 1081 SYNTAX TimeTicks 1082 UNITS "1/100th of a Second" 1083 MAX-ACCESS read-only 1084 STATUS current 1085 DESCRIPTION 1086 "The time passed since this entry's statistics were last 1087 cleared, or the time passed since this entry was loaded 1088 into the table, whichever is sooner." 1089 ::= { pfTablesAddrEntry 5 } 1090 1091pfTablesAddrBytesInPass OBJECT-TYPE 1092 SYNTAX Counter64 1093 MAX-ACCESS read-only 1094 STATUS current 1095 DESCRIPTION 1096 "The number of inbound bytes passed as a result of this entry." 1097 ::= { pfTablesAddrEntry 6 } 1098 1099pfTablesAddrBytesInBlock OBJECT-TYPE 1100 SYNTAX Counter64 1101 MAX-ACCESS read-only 1102 STATUS current 1103 DESCRIPTION 1104 "The number of inbound bytes blocked as a result of this entry." 1105 ::= { pfTablesAddrEntry 7 } 1106 1107pfTablesAddrBytesOutPass OBJECT-TYPE 1108 SYNTAX Counter64 1109 MAX-ACCESS read-only 1110 STATUS current 1111 DESCRIPTION 1112 "The number of outbound bytes passed as a result of this entry." 1113 ::= { pfTablesAddrEntry 8 } 1114 1115pfTablesAddrBytesOutBlock OBJECT-TYPE 1116 SYNTAX Counter64 1117 MAX-ACCESS read-only 1118 STATUS current 1119 DESCRIPTION 1120 "The number of outbound bytes blocked as a result of this entry." 1121 ::= { pfTablesAddrEntry 9 } 1122 1123pfTablesAddrPktsInPass OBJECT-TYPE 1124 SYNTAX Counter64 1125 MAX-ACCESS read-only 1126 STATUS current 1127 DESCRIPTION 1128 "The number of inbound packets passed as a result of this entry." 1129 ::= { pfTablesAddrEntry 10 } 1130 1131pfTablesAddrPktsInBlock OBJECT-TYPE 1132 SYNTAX Counter64 1133 MAX-ACCESS read-only 1134 STATUS current 1135 DESCRIPTION 1136 "The number of inbound packets blocked as a result of this entry." 1137 ::= { pfTablesAddrEntry 11 } 1138 1139pfTablesAddrPktsOutPass OBJECT-TYPE 1140 SYNTAX Counter64 1141 MAX-ACCESS read-only 1142 STATUS current 1143 DESCRIPTION 1144 "The number of outbound packets passed as a result of this entry." 1145 ::= { pfTablesAddrEntry 12 } 1146 1147pfTablesAddrPktsOutBlock OBJECT-TYPE 1148 SYNTAX Counter64 1149 MAX-ACCESS read-only 1150 STATUS current 1151 DESCRIPTION 1152 "The number of outbound packets blocked as a result of this 1153 entry." 1154 ::= { pfTablesAddrEntry 13 } 1155 1156-- -------------------------------------------------------------------------- 1157 1158-- 1159-- Altq information 1160-- 1161 1162pfAltqQueueNumber OBJECT-TYPE 1163 SYNTAX Unsigned32 1164 MAX-ACCESS read-only 1165 STATUS current 1166 DESCRIPTION 1167 "The number of queues in the active set." 1168 ::= { pfAltq 1 } 1169 1170pfAltqQueueTable OBJECT-TYPE 1171 SYNTAX SEQUENCE OF PfAltqQueueEntry 1172 MAX-ACCESS not-accessible 1173 STATUS current 1174 DESCRIPTION 1175 "Table containing the rules that are active on this system." 1176 ::= { pfAltq 2 } 1177 1178pfAltqQueueEntry OBJECT-TYPE 1179 SYNTAX PfAltqQueueEntry 1180 MAX-ACCESS not-accessible 1181 STATUS current 1182 DESCRIPTION 1183 "An entry in the pfAltqQueueTable table." 1184 INDEX { pfAltqQueueIndex } 1185 ::= { pfAltqQueueTable 1 } 1186 1187PfAltqQueueEntry ::= SEQUENCE { 1188 pfAltqQueueIndex Integer32, 1189 pfAltqQueueDescr OCTET STRING, 1190 pfAltqQueueParent OCTET STRING, 1191 pfAltqQueueScheduler INTEGER, 1192 pfAltqQueueBandwidth Unsigned32, 1193 pfAltqQueuePriority Integer32, 1194 pfAltqQueueLimit Integer32 1195} 1196 1197pfAltqQueueIndex OBJECT-TYPE 1198 SYNTAX Integer32 (1..2147483647) 1199 MAX-ACCESS not-accessible 1200 STATUS current 1201 DESCRIPTION 1202 "A unique value, greater than zero, for each queue." 1203 ::= { pfAltqQueueEntry 1 } 1204 1205pfAltqQueueDescr OBJECT-TYPE 1206 SYNTAX OCTET STRING 1207 MAX-ACCESS read-only 1208 STATUS current 1209 DESCRIPTION 1210 "The name of the queue." 1211 ::= { pfAltqQueueEntry 2 } 1212 1213pfAltqQueueParent OBJECT-TYPE 1214 SYNTAX OCTET STRING 1215 MAX-ACCESS read-only 1216 STATUS current 1217 DESCRIPTION 1218 "Name of the queue's parent if it has one." 1219 ::= { pfAltqQueueEntry 3 } 1220 1221pfAltqQueueScheduler OBJECT-TYPE 1222 SYNTAX INTEGER { cbq(1), hfsc(8), priq(11) } 1223 MAX-ACCESS read-only 1224 STATUS current 1225 DESCRIPTION 1226 "Scheduler algorithm implemented by this queue." 1227 ::= { pfAltqQueueEntry 4 } 1228 1229pfAltqQueueBandwidth OBJECT-TYPE 1230 SYNTAX Unsigned32 1231 MAX-ACCESS read-only 1232 STATUS current 1233 DESCRIPTION 1234 "Bandwitch assigned to this queue." 1235 ::= { pfAltqQueueEntry 5 } 1236 1237pfAltqQueuePriority OBJECT-TYPE 1238 SYNTAX Integer32 1239 MAX-ACCESS read-only 1240 STATUS current 1241 DESCRIPTION 1242 "Priority level of the queue." 1243 ::= { pfAltqQueueEntry 6 } 1244 1245pfAltqQueueLimit OBJECT-TYPE 1246 SYNTAX Integer32 1247 MAX-ACCESS read-only 1248 STATUS current 1249 DESCRIPTION 1250 "Maximum number of packets in the queue." 1251 ::= { pfAltqQueueEntry 7 } 1252 1253pfLabelsLblNumber OBJECT-TYPE 1254 SYNTAX Integer32 1255 MAX-ACCESS read-only 1256 STATUS current 1257 DESCRIPTION 1258 "The number of labeled filter rules on this system." 1259 ::= { pfLabels 1 } 1260 1261pfLabelsLblTable OBJECT-TYPE 1262 SYNTAX SEQUENCE OF PfLabelsLblEntry 1263 MAX-ACCESS not-accessible 1264 STATUS current 1265 DESCRIPTION 1266 "Table of filter rules, index on pfLabelsLblIndex." 1267 ::= { pfLabels 2 } 1268 1269pfLabelsLblEntry OBJECT-TYPE 1270 SYNTAX PfLabelsLblEntry 1271 MAX-ACCESS not-accessible 1272 STATUS current 1273 DESCRIPTION 1274 "Any entry in the pfLabelsLblTable containing information 1275 about a particular filter rule on the system." 1276 INDEX { pfLabelsLblIndex } 1277 ::= { pfLabelsLblTable 1 } 1278 1279PfLabelsLblEntry ::= SEQUENCE { 1280 pfLabelsLblIndex Integer32, 1281 pfLabelsLblName OCTET STRING, 1282 pfLabelsLblEvals Counter64, 1283 pfLabelsLblBytesIn Counter64, 1284 pfLabelsLblBytesOut Counter64, 1285 pfLabelsLblPktsIn Counter64, 1286 pfLabelsLblPktsOut Counter64 1287} 1288 1289pfLabelsLblIndex OBJECT-TYPE 1290 SYNTAX Integer32 (1..2147483647) 1291 MAX-ACCESS not-accessible 1292 STATUS current 1293 DESCRIPTION 1294 "A unique value, greater than zero, for each label." 1295 ::= { pfLabelsLblEntry 1 } 1296 1297pfLabelsLblName OBJECT-TYPE 1298 SYNTAX OCTET STRING 1299 MAX-ACCESS read-only 1300 STATUS current 1301 DESCRIPTION 1302 "The name of the rule label." 1303 ::= { pfLabelsLblEntry 2 } 1304 1305pfLabelsLblEvals OBJECT-TYPE 1306 SYNTAX Counter64 1307 MAX-ACCESS read-only 1308 STATUS current 1309 DESCRIPTION 1310 "The number of rule evaluations." 1311 ::= { pfLabelsLblEntry 3 } 1312 1313pfLabelsLblBytesIn OBJECT-TYPE 1314 SYNTAX Counter64 1315 MAX-ACCESS read-only 1316 STATUS current 1317 DESCRIPTION 1318 "The number of incoming bytes matched by the rule." 1319 ::= { pfLabelsLblEntry 4 } 1320 1321pfLabelsLblBytesOut OBJECT-TYPE 1322 SYNTAX Counter64 1323 MAX-ACCESS read-only 1324 STATUS current 1325 DESCRIPTION 1326 "The number of outgoing bytes matched by the rule." 1327 ::= { pfLabelsLblEntry 5 } 1328 1329pfLabelsLblPktsIn OBJECT-TYPE 1330 SYNTAX Counter64 1331 MAX-ACCESS read-only 1332 STATUS current 1333 DESCRIPTION 1334 "The number of incoming packets matched by the rule." 1335 ::= { pfLabelsLblEntry 6 } 1336 1337pfLabelsLblPktsOut OBJECT-TYPE 1338 SYNTAX Counter64 1339 MAX-ACCESS read-only 1340 STATUS current 1341 DESCRIPTION 1342 "The number of outgoing packets matched by the rule." 1343 ::= { pfLabelsLblEntry 7 } 1344 1345END 1346