2 -- ----------------------------------------------------------------------------
3 -- "THE BEER-WARE LICENSE" (Revision 42):
4 -- <philip@FreeBSD.org> wrote this file. As long as you retain this notice you
5 -- can do whatever you want with this stuff. If we meet some day, and you think
6 -- this stuff is worth it, you can buy me a beer in return. -Philip Paeps
7 -- ----------------------------------------------------------------------------
12 BEGEMOT-PF-MIB DEFINITIONS ::= BEGIN
15 MODULE-IDENTITY, OBJECT-TYPE, Counter64, Integer32,
23 begemotPf MODULE-IDENTITY
24 LAST-UPDATED "200501240000Z"
25 ORGANIZATION "NixSys BVBA"
34 E-Mail: philip@FreeBSD.org"
36 "The Begemot MIB for the pf packet filter."
40 begemotPfObjects OBJECT IDENTIFIER ::= { begemotPf 1 }
42 -- --------------------------------------------------------------------------
44 pfStatus OBJECT IDENTIFIER ::= { begemotPfObjects 1 }
45 pfCounter OBJECT IDENTIFIER ::= { begemotPfObjects 2 }
46 pfStateTable OBJECT IDENTIFIER ::= { begemotPfObjects 3 }
47 pfSrcNodes OBJECT IDENTIFIER ::= { begemotPfObjects 4 }
48 pfLimits OBJECT IDENTIFIER ::= { begemotPfObjects 5 }
49 pfTimeouts OBJECT IDENTIFIER ::= { begemotPfObjects 6 }
50 pfLogInterface OBJECT IDENTIFIER ::= { begemotPfObjects 7 }
51 pfInterfaces OBJECT IDENTIFIER ::= { begemotPfObjects 8 }
52 pfTables OBJECT IDENTIFIER ::= { begemotPfObjects 9 }
53 pfAltq OBJECT IDENTIFIER ::= { begemotPfObjects 10 }
55 -- --------------------------------------------------------------------------
61 pfStatusRunning OBJECT-TYPE
66 "True if pf is currently enabled."
69 pfStatusRuntime OBJECT-TYPE
71 UNITS "1/100th of a Second"
75 "Indicates how long pf has been enabled. If pf is not currently
76 enabled, indicates how long it has been disabled. If pf has not
77 been enabled or disabled since the system was started, the value
81 pfStatusDebug OBJECT-TYPE
82 SYNTAX INTEGER { none(0), urgent(1), misc(2), loud(3) }
86 "Indicates the debug level at which pf is running."
89 pfStatusHostId OBJECT-TYPE
94 "The (unique) host identifier of the machine running pf."
97 -- --------------------------------------------------------------------------
103 pfCounterMatch OBJECT-TYPE
108 "Number of packets that matched a filter rule."
111 pfCounterBadOffset OBJECT-TYPE
116 "Number of packets with bad offset."
119 pfCounterFragment OBJECT-TYPE
124 "Number of fragmented packets."
127 pfCounterShort OBJECT-TYPE
132 "Number of short packets."
135 pfCounterNormalize OBJECT-TYPE
140 "Number of normalized packets."
143 pfCounterMemDrop OBJECT-TYPE
148 "Number of packets dropped due to memory limitations."
151 -- --------------------------------------------------------------------------
157 pfStateTableCount OBJECT-TYPE
162 "Number of entries in the state table."
163 ::= { pfStateTable 1 }
165 pfStateTableSearches OBJECT-TYPE
170 "Number of searches against the state table."
171 ::= { pfStateTable 2 }
173 pfStateTableInserts OBJECT-TYPE
178 "Number of entries inserted into the state table."
179 ::= { pfStateTable 3 }
181 pfStateTableRemovals OBJECT-TYPE
186 "Number of entries removed from the state table."
187 ::= { pfStateTable 4 }
189 -- --------------------------------------------------------------------------
195 pfSrcNodesCount OBJECT-TYPE
200 "Number of entries in the source tracking table."
203 pfSrcNodesSearches OBJECT-TYPE
208 "Number of searches against the source tracking table."
211 pfSrcNodesInserts OBJECT-TYPE
216 "Number of entries inserted into the source tracking table."
219 pfSrcNodesRemovals OBJECT-TYPE
224 "Number of entries removed from the source tracking table."
227 -- --------------------------------------------------------------------------
233 pfLimitsStates OBJECT-TYPE
238 "Maximum number of 'keep state' rules in the ruleset."
241 pfLimitsSrcNodes OBJECT-TYPE
246 "Maximum number of 'sticky-address' or 'source-track' rules
250 pfLimitsFrags OBJECT-TYPE
255 "Maximum number of 'scrub' rules in the ruleset."
258 -- --------------------------------------------------------------------------
264 pfTimeoutsTcpFirst OBJECT-TYPE
269 "State after the first packet in a connection."
272 pfTimeoutsTcpOpening OBJECT-TYPE
277 "State before the destination host ever sends a packet."
280 pfTimeoutsTcpEstablished OBJECT-TYPE
285 "The fully established state."
288 pfTimeoutsTcpClosing OBJECT-TYPE
293 "State after the first FIN has been sent."
296 pfTimeoutsTcpFinWait OBJECT-TYPE
301 "State after both FINs have been exchanged and the
302 connection is closed."
305 pfTimeoutsTcpClosed OBJECT-TYPE
310 "State after one endpoint sends an RST."
313 pfTimeoutsUdpFirst OBJECT-TYPE
318 "State after the first packet."
321 pfTimeoutsUdpSingle OBJECT-TYPE
326 "State if the source host sends more than one packet but
327 the destination host has never sent one back."
330 pfTimeoutsUdpMultiple OBJECT-TYPE
335 "State if both hosts have sent packets."
338 pfTimeoutsIcmpFirst OBJECT-TYPE
343 "State after the first packet."
344 ::= { pfTimeouts 10 }
346 pfTimeoutsIcmpError OBJECT-TYPE
351 "State after an ICMP error came back in response to an
353 ::= { pfTimeouts 11 }
355 pfTimeoutsOtherFirst OBJECT-TYPE
360 "State after the first packet."
361 ::= { pfTimeouts 12 }
363 pfTimeoutsOtherSingle OBJECT-TYPE
368 "State if the source host sends more than one packet but
369 the destination host has never sent one back."
370 ::= { pfTimeouts 13 }
372 pfTimeoutsOtherMultiple OBJECT-TYPE
377 "State if both hosts have sent packets."
378 ::= { pfTimeouts 14 }
380 pfTimeoutsFragment OBJECT-TYPE
385 "Seconds before an unassembled fragment is expired."
386 ::= { pfTimeouts 15 }
388 pfTimeoutsInterval OBJECT-TYPE
393 "Interval between purging expired states and fragments."
394 ::= { pfTimeouts 16 }
396 pfTimeoutsAdaptiveStart OBJECT-TYPE
401 "When the number of state entries exceeds this value,
402 adaptive scaling begins."
403 ::= { pfTimeouts 17 }
405 pfTimeoutsAdaptiveEnd OBJECT-TYPE
410 "When reaching this number of state entries, all timeout
411 values become zero, effectively purging all state entries
413 ::= { pfTimeouts 18 }
415 pfTimeoutsSrcNode OBJECT-TYPE
420 "Length of time to retain a source tracking entry after
421 the last state expires."
422 ::= { pfTimeouts 19 }
424 -- --------------------------------------------------------------------------
430 pfLogInterfaceName OBJECT-TYPE
435 "The name of the interface configured with 'set loginterface'.
436 If no interface has been configured, the object will be empty."
437 ::= { pfLogInterface 1 }
439 pfLogInterfaceIp4BytesIn OBJECT-TYPE
444 "Number of IPv4 bytes passed in on the loginterface."
445 ::= { pfLogInterface 2 }
447 pfLogInterfaceIp4BytesOut OBJECT-TYPE
452 "Number of IPv4 bytes passed out on the loginterface."
453 ::= { pfLogInterface 3 }
455 pfLogInterfaceIp4PktsInPass OBJECT-TYPE
460 "Number of IPv4 packets passed in on the loginterface."
461 ::= { pfLogInterface 4 }
463 pfLogInterfaceIp4PktsInDrop OBJECT-TYPE
468 "Number of IPv4 packets dropped coming in on the loginterface."
469 ::= { pfLogInterface 5 }
471 pfLogInterfaceIp4PktsOutPass OBJECT-TYPE
476 "Number of IPv4 packets passed out on the loginterface."
477 ::= { pfLogInterface 6 }
479 pfLogInterfaceIp4PktsOutDrop OBJECT-TYPE
484 "Number of IPv4 packets dropped going out on the loginterface."
485 ::= { pfLogInterface 7 }
487 pfLogInterfaceIp6BytesIn OBJECT-TYPE
492 "Number of IPv6 bytes passed in on the loginterface."
493 ::= { pfLogInterface 8 }
495 pfLogInterfaceIp6BytesOut OBJECT-TYPE
500 "Number of IPv6 bytes passed out on the loginterface."
501 ::= { pfLogInterface 9 }
503 pfLogInterfaceIp6PktsInPass OBJECT-TYPE
508 "Number of IPv6 packets passed in on the loginterface."
509 ::= { pfLogInterface 10 }
511 pfLogInterfaceIp6PktsInDrop OBJECT-TYPE
516 "Number of IPv6 packets dropped coming in on the loginterface."
517 ::= { pfLogInterface 11 }
519 pfLogInterfaceIp6PktsOutPass OBJECT-TYPE
524 "Number of IPv6 packets passed out on the loginterface."
525 ::= { pfLogInterface 12 }
527 pfLogInterfaceIp6PktsOutDrop OBJECT-TYPE
532 "Number of IPv6 packets dropped going out on the loginterface."
533 ::= { pfLogInterface 13 }
535 -- --------------------------------------------------------------------------
541 pfInterfacesIfNumber OBJECT-TYPE
546 "The number of network interfaces on this system."
547 ::= { pfInterfaces 1 }
549 pfInterfacesIfTable OBJECT-TYPE
550 SYNTAX SEQUENCE OF PfInterfacesIfEntry
551 MAX-ACCESS not-accessible
554 "Table of network interfaces, indexed on pfInterfacesIfNumber."
555 ::= { pfInterfaces 2 }
557 pfInterfacesIfEntry OBJECT-TYPE
558 SYNTAX PfInterfacesIfEntry
559 MAX-ACCESS not-accessible
562 "An entry in the pfInterfacesIfTable containing information
563 about a particular network interface in the machine."
564 INDEX { pfInterfacesIfIndex }
565 ::= { pfInterfacesIfTable 1 }
567 PfInterfacesIfEntry ::= SEQUENCE {
568 pfInterfacesIfIndex Integer32,
569 pfInterfacesIfDescr OCTET STRING,
570 pfInterfacesIfType INTEGER,
571 pfInterfacesIfTZero TimeTicks,
572 pfInterfacesIfRefsState Unsigned32,
573 pfInterfacesIfRefsRule Unsigned32,
574 pfInterfacesIf4BytesInPass Counter64,
575 pfInterfacesIf4BytesInBlock Counter64,
576 pfInterfacesIf4BytesOutPass Counter64,
577 pfInterfacesIf4BytesOutBlock Counter64,
578 pfInterfacesIf4PktsInPass Counter64,
579 pfInterfacesIf4PktsInBlock Counter64,
580 pfInterfacesIf4PktsOutPass Counter64,
581 pfInterfacesIf4PktsOutBlock Counter64,
582 pfInterfacesIf6BytesInPass Counter64,
583 pfInterfacesIf6BytesInBlock Counter64,
584 pfInterfacesIf6BytesOutPass Counter64,
585 pfInterfacesIf6BytesOutBlock Counter64,
586 pfInterfacesIf6PktsInPass Counter64,
587 pfInterfacesIf6PktsInBlock Counter64,
588 pfInterfacesIf6PktsOutPass Counter64,
589 pfInterfacesIf6PktsOutBlock Counter64
592 pfInterfacesIfIndex OBJECT-TYPE
593 SYNTAX Integer32 (1..2147483647)
594 MAX-ACCESS not-accessible
597 "A unique value, greater than zero, for each interface."
598 ::= { pfInterfacesIfEntry 1 }
600 pfInterfacesIfDescr OBJECT-TYPE
605 "The name of the interface."
606 ::= { pfInterfacesIfEntry 2 }
608 pfInterfacesIfType OBJECT-TYPE
609 SYNTAX INTEGER { group(0), instance(1), detached(2) }
613 "Indicates whether the interface is a group inteface, an
614 interface instance, or whether it has been removed or
616 ::= { pfInterfacesIfEntry 3 }
618 pfInterfacesIfTZero OBJECT-TYPE
620 UNITS "1/100th of a Second"
624 "Time since statistics were last reset or since the
625 interface was loaded."
626 ::= { pfInterfacesIfEntry 4 }
628 pfInterfacesIfRefsState OBJECT-TYPE
633 "The number of state and/or source track entries referencing
635 ::= { pfInterfacesIfEntry 5 }
637 pfInterfacesIfRefsRule OBJECT-TYPE
642 "The number of rules referencing this interface."
643 ::= { pfInterfacesIfEntry 6 }
645 pfInterfacesIf4BytesInPass OBJECT-TYPE
650 "The number of IPv4 bytes passed coming in on this interface."
651 ::= { pfInterfacesIfEntry 7 }
653 pfInterfacesIf4BytesInBlock OBJECT-TYPE
658 "The number of IPv4 bytes blocked coming in on this interface."
659 ::= { pfInterfacesIfEntry 8 }
661 pfInterfacesIf4BytesOutPass OBJECT-TYPE
666 "The number of IPv4 bytes passed going out on this interface."
667 ::= { pfInterfacesIfEntry 9 }
669 pfInterfacesIf4BytesOutBlock OBJECT-TYPE
674 "The number of IPv4 bytes blocked going out on this interface."
675 ::= { pfInterfacesIfEntry 10 }
677 pfInterfacesIf4PktsInPass OBJECT-TYPE
682 "The number of IPv4 packets passed coming in on this interface."
683 ::= { pfInterfacesIfEntry 11 }
685 pfInterfacesIf4PktsInBlock OBJECT-TYPE
690 "The number of IPv4 packets blocked coming in on this interface."
691 ::= { pfInterfacesIfEntry 12 }
693 pfInterfacesIf4PktsOutPass OBJECT-TYPE
698 "The number of IPv4 packets passed going out on this interface."
699 ::= { pfInterfacesIfEntry 13 }
701 pfInterfacesIf4PktsOutBlock OBJECT-TYPE
706 "The number of IPv4 packets blocked going out on this interface."
707 ::= { pfInterfacesIfEntry 14 }
709 pfInterfacesIf6BytesInPass OBJECT-TYPE
714 "The number of IPv6 bytes passed coming in on this interface."
715 ::= { pfInterfacesIfEntry 15 }
717 pfInterfacesIf6BytesInBlock OBJECT-TYPE
722 "The number of IPv6 bytes blocked coming in on this interface."
723 ::= { pfInterfacesIfEntry 16 }
725 pfInterfacesIf6BytesOutPass OBJECT-TYPE
730 "The number of IPv6 bytes passed going out on this interface."
731 ::= { pfInterfacesIfEntry 17 }
733 pfInterfacesIf6BytesOutBlock OBJECT-TYPE
738 "The number of IPv6 bytes blocked going out on this interface."
739 ::= { pfInterfacesIfEntry 18 }
742 pfInterfacesIf6PktsInPass OBJECT-TYPE
747 "The number of IPv6 packets passed coming in on this interface."
748 ::= { pfInterfacesIfEntry 19 }
750 pfInterfacesIf6PktsInBlock OBJECT-TYPE
755 "The number of IPv6 packets blocked coming in on this interface."
756 ::= { pfInterfacesIfEntry 20 }
758 pfInterfacesIf6PktsOutPass OBJECT-TYPE
763 "The number of IPv6 packets passed going out on this interface."
764 ::= { pfInterfacesIfEntry 21 }
766 pfInterfacesIf6PktsOutBlock OBJECT-TYPE
771 "The number of IPv6 packets blocked going out on this interface."
772 ::= { pfInterfacesIfEntry 22 }
774 -- --------------------------------------------------------------------------
780 pfTablesTblNumber OBJECT-TYPE
785 "The number of tables on this system."
788 pfTablesTblTable OBJECT-TYPE
789 SYNTAX SEQUENCE OF PfTablesTblEntry
790 MAX-ACCESS not-accessible
793 "Table of tables, index on pfTablesTblIndex."
796 pfTablesTblEntry OBJECT-TYPE
797 SYNTAX PfTablesTblEntry
798 MAX-ACCESS not-accessible
801 "Any entry in the pfTablesTblTable containing information
802 about a particular table on the system."
803 INDEX { pfTablesTblIndex }
804 ::= { pfTablesTblTable 1 }
806 PfTablesTblEntry ::= SEQUENCE {
807 pfTablesTblIndex Integer32,
808 pfTablesTblDescr OCTET STRING,
809 pfTablesTblCount Integer32,
810 pfTablesTblTZero TimeTicks,
811 pfTablesTblRefsAnchor Integer32,
812 pfTablesTblRefsRule Integer32,
813 pfTablesTblEvalMatch Counter64,
814 pfTablesTblEvalNoMatch Counter64,
815 pfTablesTblBytesInPass Counter64,
816 pfTablesTblBytesInBlock Counter64,
817 pfTablesTblBytesInXPass Counter64,
818 pfTablesTblBytesOutPass Counter64,
819 pfTablesTblBytesOutBlock Counter64,
820 pfTablesTblBytesOutXPass Counter64,
821 pfTablesTblPktsInPass Counter64,
822 pfTablesTblPktsInBlock Counter64,
823 pfTablesTblPktsInXPass Counter64,
824 pfTablesTblPktsOutPass Counter64,
825 pfTablesTblPktsOutBlock Counter64,
826 pfTablesTblPktsOutXPass Counter64
829 pfTablesTblIndex OBJECT-TYPE
830 SYNTAX Integer32 (1..2147483647)
831 MAX-ACCESS not-accessible
834 "A unique value, greater than zero, for each table."
835 ::= { pfTablesTblEntry 1 }
837 pfTablesTblDescr OBJECT-TYPE
842 "The name of the table."
843 ::= { pfTablesTblEntry 2 }
845 pfTablesTblCount OBJECT-TYPE
850 "The number of addresses in the table."
851 ::= { pfTablesTblEntry 3 }
853 pfTablesTblTZero OBJECT-TYPE
855 UNITS "1/100th of a Second"
859 "The time passed since the statistics of this table were last
860 cleared or the time since this table was loaded, whichever is
862 ::= { pfTablesTblEntry 4 }
864 pfTablesTblRefsAnchor OBJECT-TYPE
869 "The number of anchors referencing this table."
870 ::= { pfTablesTblEntry 5 }
872 pfTablesTblRefsRule OBJECT-TYPE
877 "The number of rules referencing this table."
878 ::= { pfTablesTblEntry 6 }
880 pfTablesTblEvalMatch OBJECT-TYPE
885 "The number of evaluations returning a match."
886 ::= { pfTablesTblEntry 7 }
888 pfTablesTblEvalNoMatch OBJECT-TYPE
893 "The number of evaluations not returning a match."
894 ::= { pfTablesTblEntry 8 }
896 pfTablesTblBytesInPass OBJECT-TYPE
901 "The number of bytes passed in matching the table."
902 ::= { pfTablesTblEntry 9 }
904 pfTablesTblBytesInBlock OBJECT-TYPE
909 "The number of bytes blocked coming in matching the table."
910 ::= { pfTablesTblEntry 10 }
912 pfTablesTblBytesInXPass OBJECT-TYPE
917 "The number of bytes statefully passed in where the state
918 entry refers to the table, but the table no longer contains
919 the address in question."
920 ::= { pfTablesTblEntry 11 }
922 pfTablesTblBytesOutPass OBJECT-TYPE
927 "The number of bytes passed out matching the table."
928 ::= { pfTablesTblEntry 12 }
930 pfTablesTblBytesOutBlock OBJECT-TYPE
935 "The number of bytes blocked going out matching the table."
936 ::= { pfTablesTblEntry 13 }
938 pfTablesTblBytesOutXPass OBJECT-TYPE
943 "The number of bytes statefully passed out where the state
944 entry refers to the table, but the table no longer contains
945 the address in question."
946 ::= { pfTablesTblEntry 14 }
948 pfTablesTblPktsInPass OBJECT-TYPE
953 "The number of packets passed in matching the table."
954 ::= { pfTablesTblEntry 15 }
956 pfTablesTblPktsInBlock OBJECT-TYPE
961 "The number of packets blocked coming in matching the table."
962 ::= { pfTablesTblEntry 16 }
964 pfTablesTblPktsInXPass OBJECT-TYPE
969 "The number of packets statefully passed in where the state
970 entry refers to the table, but the table no longer contains
971 the address in question."
972 ::= { pfTablesTblEntry 17 }
974 pfTablesTblPktsOutPass OBJECT-TYPE
979 "The number of packets passed out matching the table."
980 ::= { pfTablesTblEntry 18 }
982 pfTablesTblPktsOutBlock OBJECT-TYPE
987 "The number of packets blocked going out matching the table."
988 ::= { pfTablesTblEntry 19 }
990 pfTablesTblPktsOutXPass OBJECT-TYPE
995 "The number of packets statefully passed out where the state
996 entry refers to the table, but the table no longer contains
997 the address in question."
998 ::= { pfTablesTblEntry 20 }
1000 pfTablesAddrTable OBJECT-TYPE
1001 SYNTAX SEQUENCE OF PfTablesAddrEntry
1002 MAX-ACCESS not-accessible
1005 "Table of addresses from every table on the system."
1008 pfTablesAddrEntry OBJECT-TYPE
1009 SYNTAX PfTablesAddrEntry
1010 MAX-ACCESS not-accessible
1013 "An entry in the pfTablesAddrTable containing information
1014 about a particular entry in a table."
1015 INDEX { pfTablesAddrIndex }
1016 ::= { pfTablesAddrTable 1 }
1018 PfTablesAddrEntry ::= SEQUENCE {
1019 pfTablesAddrIndex Integer32,
1020 pfTablesAddrNet IpAddress,
1021 pfTablesAddrMask Integer32,
1022 pfTablesAddrTZero TimeTicks,
1023 pfTablesAddrBytesInPass Counter64,
1024 pfTablesAddrBytesInBlock Counter64,
1025 pfTablesAddrBytesOutPass Counter64,
1026 pfTablesAddrBytesOutBlock Counter64,
1027 pfTablesAddrPktsInPass Counter64,
1028 pfTablesAddrPktsInBlock Counter64,
1029 pfTablesAddrPktsOutPass Counter64,
1030 pfTablesAddrPktsOutBlock Counter64
1033 pfTablesAddrIndex OBJECT-TYPE
1034 SYNTAX Integer32 (1..2147483647)
1035 MAX-ACCESS not-accessible
1038 "A unique value, greater than zero, for each address."
1039 ::= { pfTablesAddrEntry 1 }
1041 pfTablesAddrNet OBJECT-TYPE
1043 MAX-ACCESS read-only
1046 "The IP address of this particular table entry."
1047 ::= { pfTablesAddrEntry 2 }
1049 pfTablesAddrMask OBJECT-TYPE
1050 SYNTAX Integer32 (0..32)
1051 MAX-ACCESS read-only
1054 "The CIDR netmask of this particular table entry."
1055 ::= { pfTablesAddrEntry 3 }
1057 pfTablesAddrTZero OBJECT-TYPE
1059 UNITS "1/100th of a Second"
1060 MAX-ACCESS read-only
1063 "The time passed since this entry's statistics were last
1064 cleared, or the time passed since this entry was loaded
1065 into the table, whichever is sooner."
1066 ::= { pfTablesAddrEntry 4 }
1068 pfTablesAddrBytesInPass OBJECT-TYPE
1070 MAX-ACCESS read-only
1073 "The number of inbound bytes passed as a result of this entry."
1074 ::= { pfTablesAddrEntry 5 }
1076 pfTablesAddrBytesInBlock OBJECT-TYPE
1078 MAX-ACCESS read-only
1081 "The number of inbound bytes blocked as a result of this entry."
1082 ::= { pfTablesAddrEntry 6 }
1084 pfTablesAddrBytesOutPass OBJECT-TYPE
1086 MAX-ACCESS read-only
1089 "The number of outbound bytes passed as a result of this entry."
1090 ::= { pfTablesAddrEntry 7 }
1092 pfTablesAddrBytesOutBlock OBJECT-TYPE
1094 MAX-ACCESS read-only
1097 "The number of outbound bytes blocked as a result of this entry."
1098 ::= { pfTablesAddrEntry 8 }
1100 pfTablesAddrPktsInPass OBJECT-TYPE
1102 MAX-ACCESS read-only
1105 "The number of inbound packets passed as a result of this entry."
1106 ::= { pfTablesAddrEntry 9 }
1108 pfTablesAddrPktsInBlock OBJECT-TYPE
1110 MAX-ACCESS read-only
1113 "The number of inbound packets blocked as a result of this entry."
1114 ::= { pfTablesAddrEntry 10 }
1116 pfTablesAddrPktsOutPass OBJECT-TYPE
1118 MAX-ACCESS read-only
1121 "The number of outbound packets passed as a result of this entry."
1122 ::= { pfTablesAddrEntry 11 }
1124 pfTablesAddrPktsOutBlock OBJECT-TYPE
1126 MAX-ACCESS read-only
1129 "The number of outbound packets blocked as a result of this
1131 ::= { pfTablesAddrEntry 12 }
1133 -- --------------------------------------------------------------------------
1139 pfAltqQueueNumber OBJECT-TYPE
1141 MAX-ACCESS read-only
1144 "The number of queues in the active set."
1147 pfAltqQueueTable OBJECT-TYPE
1148 SYNTAX SEQUENCE OF PfAltqQueueEntry
1149 MAX-ACCESS not-accessible
1152 "Table containing the rules that are active on this system."
1155 pfAltqQueueEntry OBJECT-TYPE
1156 SYNTAX PfAltqQueueEntry
1157 MAX-ACCESS not-accessible
1160 "An entry in the pfAltqQueueTable table."
1161 INDEX { pfAltqQueueIndex }
1162 ::= { pfAltqQueueTable 1 }
1164 PfAltqQueueEntry ::= SEQUENCE {
1165 pfAltqQueueIndex Integer32,
1166 pfAltqQueueDescr OCTET STRING,
1167 pfAltqQueueParent OCTET STRING,
1168 pfAltqQueueScheduler INTEGER,
1169 pfAltqQueueBandwidth Unsigned32,
1170 pfAltqQueuePriority Integer32,
1171 pfAltqQueueLimit Integer32
1174 pfAltqQueueIndex OBJECT-TYPE
1175 SYNTAX Integer32 (1..2147483647)
1176 MAX-ACCESS not-accessible
1179 "A unique value, greater than zero, for each queue."
1180 ::= { pfAltqQueueEntry 1 }
1182 pfAltqQueueDescr OBJECT-TYPE
1184 MAX-ACCESS read-only
1187 "The name of the queue."
1188 ::= { pfAltqQueueEntry 2 }
1190 pfAltqQueueParent OBJECT-TYPE
1192 MAX-ACCESS read-only
1195 "Name of the queue's parent if it has one."
1196 ::= { pfAltqQueueEntry 3 }
1198 pfAltqQueueScheduler OBJECT-TYPE
1199 SYNTAX INTEGER { cbq(1), hfsc(8), priq(11) }
1200 MAX-ACCESS read-only
1203 "Scheduler algorithm implemented by this queue."
1204 ::= { pfAltqQueueEntry 4 }
1206 pfAltqQueueBandwidth OBJECT-TYPE
1208 MAX-ACCESS read-only
1211 "Bandwitch assigned to this queue."
1212 ::= { pfAltqQueueEntry 5 }
1214 pfAltqQueuePriority OBJECT-TYPE
1216 MAX-ACCESS read-only
1219 "Priority level of the queue."
1220 ::= { pfAltqQueueEntry 6 }
1222 pfAltqQueueLimit OBJECT-TYPE
1224 MAX-ACCESS read-only
1227 "Maximum number of packets in the queue."
1228 ::= { pfAltqQueueEntry 7 }