Tuesday, October 18, 2022

snmp MIBs

Hi,
I wanted to ask about two things related to MIBs.
1) I noticed that in OPENBSD-PF-MIB.txt we have entries like pfTblAddrTblIndex
pfTblAddrTblIndex OBJECT-TYPE        SYNTAX          Integer32 (1..2147483647)        MAX-ACCESS      read-only        STATUS          current        DESCRIPTION        "The index value which uniquely identifies the table which        contains this pfTblAddrNet/pfTblAddrMask pair."        ::= { pfTblAddrEntry 1 }
Which translates to OID 1.3.6.1.4.1.30155.1.9.129.1.1 (if I am not mistaken). 
If I do snmp walk of the whole 1.3 I can see that after 1.3.6.1.4.1.30155.1.9.128 the next OID is 1.3.6.1.4.1.30155.1.10.1.0, so  1.3.6.1.4.1.30155.1.9.129 is skipped.Is there something that needs to be enabled in order to get this OID? I have several tables setup in my pf.conf.
2) I wanted to see some stats for Pkts and Bytes on one of the interfaces but was a bit confused by the description difference between In and Out.
For "In" we have:
pfIfIn4PassBytes OBJECT-TYPE        SYNTAX          Counter64        MAX-ACCESS      read-only        STATUS          current        DESCRIPTION        "The number of IPv4 bytes passed in."        ::= { pfIfEntry 7 }
pfIfIn4BlockPkts OBJECT-TYPE        SYNTAX          Counter64        MAX-ACCESS      read-only        STATUS          current        DESCRIPTION        "The number of incoming IPv4 packets blocked."        ::= { pfIfEntry 8 }
However, for "Out" we have:
pfIfOut4PassPkts OBJECT-TYPE        SYNTAX          Counter64        MAX-ACCESS      read-only        STATUS          current        DESCRIPTION        "The number of IPv4 bytes passed out." <---- ?        ::= { pfIfEntry 10 }
pfIfOut4PassBytes OBJECT-TYPE        SYNTAX          Counter64        MAX-ACCESS      read-only        STATUS          current        DESCRIPTION        "The number of IPv4 bytes passed out."        ::= { pfIfEntry 11 }
The same can be seen for In6 and Out6
Do we only count bytes for "Out"? Or perhaps description is wrong?
 

No comments:

Post a Comment