1-- $OpenBSD: OPENBSD-PF-MIB.txt,v 1.8 2022/10/25 09:54:24 martijn Exp $
2--
3-- Copyright (c) 2004-2013 Joel Knight <knight.joel@gmail.com>
4--
5-- Permission to use, copy, modify, and distribute this document for any
6-- purpose with or without fee is hereby granted, provided that the above
7-- copyright notice and this permission notice appear in all copies.
8--
9-- THE DOCUMENT IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10-- WITH REGARD TO THIS DOCUMENT INCLUDING ALL IMPLIED WARRANTIES OF
11-- MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12-- ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13-- WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14-- ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15-- OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS DOCUMENT.
16
17
18OPENBSD-PF-MIB DEFINITIONS ::= BEGIN
19
20IMPORTS
21	MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-TYPE,
22	Counter32, Counter64, Unsigned32, Integer32, IpAddress,
23	TimeTicks, enterprises
24		FROM SNMPv2-SMI
25
26	TruthValue, DisplayString
27		FROM SNMPv2-TC
28
29	SnmpAdminString
30		FROM SNMP-FRAMEWORK-MIB
31
32	openBSD
33		FROM OPENBSD-BASE-MIB
34
35	MODULE-COMPLIANCE, OBJECT-GROUP
36		FROM SNMPv2-CONF;
37
38pfMIBObjects MODULE-IDENTITY
39    LAST-UPDATED "202210190830Z"
40    ORGANIZATION "OpenBSD"
41    CONTACT-INFO "
42                  Author:     Joel Knight
43                  email:      knight.joel@gmail.com
44                  www:        http://www.packetmischief.ca/openbsd-snmp-mibs/
45                 "
46    DESCRIPTION "The MIB module for gathering information from
47		OpenBSD's packet filter.
48                "
49    REVISION "202210190830Z"
50    DESCRIPTION "Fix description of several objects from bytes to the obviously intended packets"
51    REVISION "202103231933Z"
52    DESCRIPTION "Use DisplayString/SnmpAdminString not OCTET STRING where appropriate"
53    REVISION "201506091728Z"
54    DESCRIPTION "Add separate counter for failed 'route-to' applications"
55    REVISION "201308310446Z"
56    DESCRIPTION "Add pf(4) table byte/packet counters for 'match' rules"
57    REVISION "201302242033Z"
58    DESCRIPTION "Add separate counter for failed translations"
59    REVISION "201201260000Z"
60    DESCRIPTION "Add OPENBSD-PF-MIB to OpenBSD's snmpd"
61    ::= { openBSD 1 }
62
63
64-- define the sections of the MIB
65
66pfInfo				OBJECT IDENTIFIER ::= { pfMIBObjects 1 }
67pfCounters			OBJECT IDENTIFIER ::= { pfMIBObjects 2 }
68pfStateTable			OBJECT IDENTIFIER ::= { pfMIBObjects 3 }
69pfLogInterface			OBJECT IDENTIFIER ::= { pfMIBObjects 4 }
70pfSrcTracking			OBJECT IDENTIFIER ::= { pfMIBObjects 5 }
71pfLimits			OBJECT IDENTIFIER ::= { pfMIBObjects 6 }
72pfTimeouts			OBJECT IDENTIFIER ::= { pfMIBObjects 7 }
73pfInterfaces			OBJECT IDENTIFIER ::= { pfMIBObjects 8 }
74pfTables			OBJECT IDENTIFIER ::= { pfMIBObjects 9 }
75pfLabels			OBJECT IDENTIFIER ::= { pfMIBObjects 10 }
76pfsyncStats			OBJECT IDENTIFIER ::= { pfMIBObjects 11 }
77
78
79-- pfInfo
80
81pfRunning OBJECT-TYPE
82    SYNTAX      TruthValue
83    MAX-ACCESS  read-only
84    STATUS      current
85    DESCRIPTION
86	"Indicates whether pf is enabled or not."
87    ::= { pfInfo 1 }
88
89pfRuntime OBJECT-TYPE
90    SYNTAX      TimeTicks
91    UNITS      "1/100th of a Second"
92    MAX-ACCESS  read-only
93    STATUS      current
94    DESCRIPTION
95	"Indicates how long pf has been enabled. If pf is not
96	enabled, indicates how long pf has been disabled. If pf has not
97	been explicitly enabled or disabled since the system was booted,
98	the value will be 0."
99    ::= { pfInfo 2 }
100
101pfDebug OBJECT-TYPE
102    SYNTAX      INTEGER {
103	emerg(0),
104	alert(1),
105	crit(2),
106	err(3),
107	warning(4),
108	notice(5),
109	info(6),
110	debug(7)
111    }
112    MAX-ACCESS  read-only
113    STATUS      current
114    DESCRIPTION
115	"Indicates the debug level that pf is running at."
116    ::= { pfInfo 3 }
117
118pfHostid OBJECT-TYPE
119    SYNTAX      OCTET STRING
120    MAX-ACCESS  read-only
121    STATUS      current
122    DESCRIPTION
123	"The (unique) host id of the machine running pf."
124    ::= { pfInfo 4 }
125
126
127-- pfCounters
128
129pfCntMatch OBJECT-TYPE
130    SYNTAX      Counter64
131    MAX-ACCESS  read-only
132    STATUS      current
133    DESCRIPTION
134	"The number of packets that have matched a filter rule."
135    ::= { pfCounters 1 }
136
137pfCntBadOffset OBJECT-TYPE
138    SYNTAX      Counter64
139    MAX-ACCESS  read-only
140    STATUS      current
141    DESCRIPTION
142	"The number of packets that have had a bad offset value."
143    ::= { pfCounters 2 }
144
145pfCntFragment OBJECT-TYPE
146    SYNTAX      Counter64
147    MAX-ACCESS  read-only
148    STATUS      current
149    DESCRIPTION
150	"The number of packet fragments."
151    ::= { pfCounters 3 }
152
153pfCntShort OBJECT-TYPE
154    SYNTAX      Counter64
155    MAX-ACCESS  read-only
156    STATUS      current
157    DESCRIPTION
158	"The number of packets that were too short to contain a valid header."
159    ::= { pfCounters 4 }
160
161pfCntNormalize OBJECT-TYPE
162    SYNTAX      Counter64
163    MAX-ACCESS  read-only
164    STATUS      current
165    DESCRIPTION
166	"The number of packets that were normalized using the packet scrubber."
167    ::= { pfCounters 5 }
168
169pfCntMemory OBJECT-TYPE
170    SYNTAX      Counter64
171    MAX-ACCESS  read-only
172    STATUS      current
173    DESCRIPTION
174	"The number of packets that were dropped due to memory limitations."
175    ::= { pfCounters 6 }
176
177pfCntTimestamp OBJECT-TYPE
178    SYNTAX      Counter64
179    MAX-ACCESS  read-only
180    STATUS      current
181    DESCRIPTION
182	"The number of packets that were dropped due to improper RFC1323 timestamp."
183    ::= { pfCounters 7 }
184
185pfCntCongestion OBJECT-TYPE
186    SYNTAX      Counter64
187    MAX-ACCESS  read-only
188    STATUS      current
189    DESCRIPTION
190	"The number of packets that were dropped due to congestion on the interface."
191    ::= { pfCounters 8 }
192
193pfCntIpOption OBJECT-TYPE
194    SYNTAX      Counter64
195    MAX-ACCESS  read-only
196    STATUS      current
197    DESCRIPTION
198	"The number of packets that were dropped due to having options set in
199    the IP header."
200    ::= { pfCounters 9 }
201
202pfCntProtoCksum OBJECT-TYPE
203    SYNTAX      Counter64
204    MAX-ACCESS  read-only
205    STATUS      current
206    DESCRIPTION
207	"The number of packets that were dropped due to TCP checksum failures."
208    ::= { pfCounters 10 }
209
210pfCntStateMismatch OBJECT-TYPE
211    SYNTAX      Counter64
212    MAX-ACCESS  read-only
213    STATUS      current
214    DESCRIPTION
215	"The number of packets that were dropped due to a state table mismatch."
216    ::= { pfCounters 11 }
217
218pfCntStateInsert OBJECT-TYPE
219    SYNTAX      Counter64
220    MAX-ACCESS  read-only
221    STATUS      current
222    DESCRIPTION
223	"The number of packets that were dropped due to errors creating a
224	state table entry."
225    ::= { pfCounters 12 }
226
227pfCntStateLimit OBJECT-TYPE
228    SYNTAX      Counter64
229    MAX-ACCESS  read-only
230    STATUS      current
231    DESCRIPTION
232	"The number of packets that were dropped due to the per-rule max
233	state limit being reached."
234    ::= { pfCounters 13 }
235
236pfCntSrcLimit OBJECT-TYPE
237    SYNTAX      Counter64
238    MAX-ACCESS  read-only
239    STATUS      current
240    DESCRIPTION
241	"The number of packets that were dropped due to stateful connection
242	tracking. A packet could be dropped due to resource limits (memory)
243	or due to a tracking limit being reached."
244    ::= { pfCounters 14 }
245
246pfCntSynproxy OBJECT-TYPE
247    SYNTAX      Counter64
248    MAX-ACCESS  read-only
249    STATUS      current
250    DESCRIPTION
251	"The number of packets that were dropped during the TCP synproxy process."
252    ::= { pfCounters 15 }
253
254pfCntTranslate OBJECT-TYPE
255    SYNTAX      Counter64
256    MAX-ACCESS  read-only
257    STATUS      current
258    DESCRIPTION
259	"The number of packets that were dropped because network address
260        translation was requested and no unused port was available."
261    ::= { pfCounters 16 }
262
263pfCntNoRoute OBJECT-TYPE
264    SYNTAX      Counter64
265    MAX-ACCESS  read-only
266    STATUS      current
267    DESCRIPTION
268	"The number of packets that were dropped because policy based routing
269        was requested but no target addresses were available."
270    ::= { pfCounters 17 }
271
272-- pfStateTable
273
274pfStateCount OBJECT-TYPE
275    SYNTAX      Unsigned32
276    MAX-ACCESS  read-only
277    STATUS      current
278    DESCRIPTION
279	"The number of entries in the state table."
280    ::= { pfStateTable 1 }
281
282pfStateSearches OBJECT-TYPE
283    SYNTAX      Counter64
284    MAX-ACCESS  read-only
285    STATUS      current
286    DESCRIPTION
287	"The number of searches against the state table."
288    ::= { pfStateTable 2 }
289
290pfStateInserts OBJECT-TYPE
291    SYNTAX      Counter64
292    MAX-ACCESS  read-only
293    STATUS      current
294    DESCRIPTION
295	"The number of inserts into the state table."
296    ::= { pfStateTable 3 }
297
298pfStateRemovals OBJECT-TYPE
299    SYNTAX      Counter64
300    MAX-ACCESS  read-only
301    STATUS      current
302    DESCRIPTION
303	"The number of removals from the state table."
304    ::= { pfStateTable 4 }
305
306
307-- pfLogInterface
308
309pfLogIfName OBJECT-TYPE
310    SYNTAX      DisplayString
311    MAX-ACCESS  read-only
312    STATUS      current
313    DESCRIPTION
314	"The name of the interface configured using 'set loginterface'.
315	If no interface has been configured, the object will be empty."
316    ::= { pfLogInterface 1 }
317
318pfLogIfIpBytesIn OBJECT-TYPE
319    SYNTAX      Counter64
320    MAX-ACCESS  read-only
321    STATUS      current
322    DESCRIPTION
323	"The number of IPv4 bytes passed in on the loginterface."
324    ::= { pfLogInterface 2 }
325
326pfLogIfIpBytesOut OBJECT-TYPE
327    SYNTAX      Counter64
328    MAX-ACCESS  read-only
329    STATUS      current
330    DESCRIPTION
331	"The number of IPv4 bytes passed out on the loginterface."
332    ::= { pfLogInterface 3 }
333
334pfLogIfIpPktsInPass OBJECT-TYPE
335    SYNTAX      Counter64
336    MAX-ACCESS  read-only
337    STATUS      current
338    DESCRIPTION
339	"The number of IPv4 packets passed in on the loginterface."
340    ::= { pfLogInterface 4 }
341
342pfLogIfIpPktsInDrop OBJECT-TYPE
343    SYNTAX      Counter64
344    MAX-ACCESS  read-only
345    STATUS      current
346    DESCRIPTION
347	"The number of dropped IPv4 packets coming in on the loginterface."
348    ::= { pfLogInterface 5 }
349
350pfLogIfIpPktsOutPass OBJECT-TYPE
351    SYNTAX      Counter64
352    MAX-ACCESS  read-only
353    STATUS      current
354    DESCRIPTION
355	"The number of IPv4 packets passed out on the loginterface."
356    ::= { pfLogInterface 6 }
357
358pfLogIfIpPktsOutDrop OBJECT-TYPE
359    SYNTAX      Counter64
360    MAX-ACCESS  read-only
361    STATUS      current
362    DESCRIPTION
363	"The number of dropped IPv4 packets going out on the loginterface."
364    ::= { pfLogInterface 7 }
365
366pfLogIfIp6BytesIn OBJECT-TYPE
367    SYNTAX      Counter64
368    MAX-ACCESS  read-only
369    STATUS      current
370    DESCRIPTION
371	"The number of IPv6 bytes passed in on the loginterface."
372    ::= { pfLogInterface 8 }
373
374pfLogIfIp6BytesOut OBJECT-TYPE
375    SYNTAX      Counter64
376    MAX-ACCESS  read-only
377    STATUS      current
378    DESCRIPTION
379	"The number of IPv6 bytes passed out on the loginterface."
380    ::= { pfLogInterface 9 }
381
382pfLogIfIp6PktsInPass OBJECT-TYPE
383    SYNTAX      Counter64
384    MAX-ACCESS  read-only
385    STATUS      current
386    DESCRIPTION
387	"The number of IPv6 packets passed in on the loginterface."
388    ::= { pfLogInterface 10 }
389
390pfLogIfIp6PktsInDrop OBJECT-TYPE
391    SYNTAX      Counter64
392    MAX-ACCESS  read-only
393    STATUS      current
394    DESCRIPTION
395	"The number of dropped IPv6 packets coming in on the loginterface."
396    ::= { pfLogInterface 11 }
397
398pfLogIfIp6PktsOutPass OBJECT-TYPE
399    SYNTAX      Counter64
400    MAX-ACCESS  read-only
401    STATUS      current
402    DESCRIPTION
403	"The number of IPv6 packets passed out on the loginterface."
404    ::= { pfLogInterface 12 }
405
406pfLogIfIp6PktsOutDrop OBJECT-TYPE
407    SYNTAX      Counter64
408    MAX-ACCESS  read-only
409    STATUS      current
410    DESCRIPTION
411	"The number of dropped IPv6 packets going out on the loginterface."
412    ::= { pfLogInterface 13 }
413
414
415-- pfSrcTracking
416
417pfSrcTrackCount OBJECT-TYPE
418    SYNTAX      Unsigned32
419    MAX-ACCESS  read-only
420    STATUS      current
421    DESCRIPTION
422	"The number of entries in the source tracking table."
423    ::= { pfSrcTracking 1 }
424
425pfSrcTrackSearches OBJECT-TYPE
426    SYNTAX      Counter64
427    MAX-ACCESS  read-only
428    STATUS      current
429    DESCRIPTION
430	"The number of searches against the source tracking table."
431    ::= { pfSrcTracking 2 }
432
433pfSrcTrackInserts OBJECT-TYPE
434    SYNTAX      Counter64
435    MAX-ACCESS  read-only
436    STATUS      current
437    DESCRIPTION
438	"The number of inserts into the source tracking table."
439    ::= { pfSrcTracking 3 }
440
441pfSrcTrackRemovals OBJECT-TYPE
442    SYNTAX      Counter64
443    MAX-ACCESS  read-only
444    STATUS      current
445    DESCRIPTION
446	"The number of removals from the source tracking table."
447    ::= { pfSrcTracking 4 }
448
449
450-- pfLimits
451
452pfLimitStates OBJECT-TYPE
453	SYNTAX		Unsigned32
454	MAX-ACCESS	read-only
455	STATUS		current
456	DESCRIPTION
457	"The maximum number of entries in the memory pool used by state
458	table entries (filter rules that specify 'keep state')."
459	::= { pfLimits 1 }
460
461pfLimitSourceNodes OBJECT-TYPE
462	SYNTAX		Unsigned32
463	MAX-ACCESS	read-only
464	STATUS		current
465	DESCRIPTION
466	"The maximum number of entries in the memory pool used for tracking
467	source IP addresses (filter rules that specify 'sticky-address' or
468	'source-track' options)."
469	::= { pfLimits 2 }
470
471pfLimitFragments OBJECT-TYPE
472	SYNTAX		Unsigned32
473	MAX-ACCESS	read-only
474	STATUS		current
475	DESCRIPTION
476	"The maximum number of entries in the memory pool used for packet
477	reassembly (scrub rules)."
478	::= { pfLimits 3 }
479
480pfLimitMaxTables OBJECT-TYPE
481	SYNTAX		Unsigned32
482	MAX-ACCESS	read-only
483	STATUS		current
484	DESCRIPTION
485	"The maximum number of tables that can be created as part of the
486	active ruleset."
487	::= { pfLimits 4 }
488
489pfLimitMaxTableEntries OBJECT-TYPE
490	SYNTAX		Unsigned32
491	MAX-ACCESS	read-only
492	STATUS		current
493	DESCRIPTION
494	"The overall maximum number of addresses that can be stored in
495	tables."
496	::= { pfLimits 5 }
497
498
499-- pfTimeouts
500
501pfTimeoutTcpFirst OBJECT-TYPE
502	SYNTAX		Integer32
503	MAX-ACCESS	read-only
504	STATUS		current
505	DESCRIPTION
506	"State after receiving the first TCP packet in a new connection."
507	::= { pfTimeouts 1 }
508
509pfTimeoutTcpOpening OBJECT-TYPE
510	SYNTAX		Integer32
511	MAX-ACCESS	read-only
512	STATUS		current
513	DESCRIPTION
514	"State before the destination host ever sends a packet in response
515	to a new connection from this host."
516	::= { pfTimeouts 2 }
517
518pfTimeoutTcpEstablished OBJECT-TYPE
519	SYNTAX		Integer32
520	MAX-ACCESS	read-only
521	STATUS		current
522	DESCRIPTION
523	"State when a TCP connection is fully established."
524	::= { pfTimeouts 3 }
525
526pfTimeoutTcpClosing OBJECT-TYPE
527	SYNTAX		Integer32
528	MAX-ACCESS	read-only
529	STATUS		current
530	DESCRIPTION
531	"State after the first FIN has been sent."
532	::= { pfTimeouts 4 }
533
534pfTimeoutTcpFinWait OBJECT-TYPE
535	SYNTAX		Integer32
536	MAX-ACCESS	read-only
537	STATUS		current
538	DESCRIPTION
539	"State after both FINs are sent and the connection is closed."
540	::= { pfTimeouts 5 }
541
542pfTimeoutTcpClosed OBJECT-TYPE
543	SYNTAX		Integer32
544	MAX-ACCESS	read-only
545	STATUS		current
546	DESCRIPTION
547	"State after the first RST has been sent."
548	::= { pfTimeouts 6 }
549
550pfTimeoutUdpFirst OBJECT-TYPE
551	SYNTAX		Integer32
552	MAX-ACCESS	read-only
553	STATUS		current
554	DESCRIPTION
555	"State after receiving the first UDP packet."
556	::= { pfTimeouts 7 }
557
558pfTimeoutUdpSingle OBJECT-TYPE
559	SYNTAX		Integer32
560	MAX-ACCESS	read-only
561	STATUS		current
562	DESCRIPTION
563	"State if the source sends more than 1 packet but the destination
564	has never sent a packet back."
565	::= { pfTimeouts 8 }
566
567pfTimeoutUdpMultiple OBJECT-TYPE
568	SYNTAX		Integer32
569	MAX-ACCESS	read-only
570	STATUS		current
571	DESCRIPTION
572	"State when both hosts have sent packets."
573	::= { pfTimeouts 9 }
574
575pfTimeoutIcmpFirst OBJECT-TYPE
576	SYNTAX		Integer32
577	MAX-ACCESS	read-only
578	STATUS		current
579	DESCRIPTION
580	"State after receiving the first ICMP packet."
581	::= { pfTimeouts 10 }
582
583pfTimeoutIcmpError OBJECT-TYPE
584	SYNTAX		Integer32
585	MAX-ACCESS	read-only
586	STATUS		current
587	DESCRIPTION
588	"State when an ICMP error comes back in response to an ICMP
589	packet."
590	::= { pfTimeouts 11 }
591
592pfTimeoutOtherFirst OBJECT-TYPE
593	SYNTAX		Integer32
594	MAX-ACCESS	read-only
595	STATUS		current
596	DESCRIPTION
597	"State after receiving the first packet."
598	::= { pfTimeouts 12 }
599
600pfTimeoutOtherSingle OBJECT-TYPE
601	SYNTAX		Integer32
602	MAX-ACCESS	read-only
603	STATUS		current
604	DESCRIPTION
605	"State if the source sends more than 1 packet but the destination
606	has never sent a packet back."
607	::= { pfTimeouts 13 }
608
609pfTimeoutOtherMultiple OBJECT-TYPE
610	SYNTAX		Integer32
611	MAX-ACCESS	read-only
612	STATUS		current
613	DESCRIPTION
614	"State when both hosts have sent packets."
615	::= { pfTimeouts 14 }
616
617pfTimeoutFragment OBJECT-TYPE
618	SYNTAX		Integer32
619	MAX-ACCESS	read-only
620	STATUS		current
621	DESCRIPTION
622	"How long before an unassembled fragment is expired."
623	::= { pfTimeouts 15 }
624
625pfTimeoutInterval OBJECT-TYPE
626	SYNTAX		Integer32
627	MAX-ACCESS	read-only
628	STATUS		current
629	DESCRIPTION
630	"Interval before purging expired states and fragments."
631	::= { pfTimeouts 16 }
632
633pfTimeoutAdaptiveStart OBJECT-TYPE
634	SYNTAX		Integer32
635	MAX-ACCESS	read-only
636	STATUS		current
637	DESCRIPTION
638	"When the number of state entries exceeds this value, adaptive
639	scaling begins."
640	::= { pfTimeouts 17 }
641
642pfTimeoutAdaptiveEnd OBJECT-TYPE
643	SYNTAX		Integer32
644	MAX-ACCESS	read-only
645	STATUS		current
646	DESCRIPTION
647	"When reaching this number of state entries, all timeout values
648	become zero, effectively purging all state entries immediately."
649	::= { pfTimeouts 18 }
650
651pfTimeoutSrcTrack OBJECT-TYPE
652	SYNTAX		Integer32
653	MAX-ACCESS	read-only
654	STATUS		current
655	DESCRIPTION
656	"Time that a source tracking entry will stay around after the
657	last state expires."
658	::= { pfTimeouts 19 }
659
660
661-- pfInterfaces
662
663pfIfNumber  OBJECT-TYPE
664	SYNTAX      Integer32
665	MAX-ACCESS  read-only
666	STATUS      current
667	DESCRIPTION
668	"The number of network interfaces present on this system."
669	::= { pfInterfaces 1 }
670
671pfIfTable OBJECT-TYPE
672	SYNTAX		SEQUENCE OF PfIfEntry
673	MAX-ACCESS	not-accessible
674	STATUS		current
675	DESCRIPTION
676	"A list of individual interfaces. The number of entries is
677	given by the value of pfIfNumber."
678	::= { pfInterfaces 128 }
679
680pfIfEntry OBJECT-TYPE
681	SYNTAX      PfIfEntry
682	MAX-ACCESS  not-accessible
683	STATUS      current
684	DESCRIPTION
685	"An entry containing management information applicable to a
686	particular interface."
687	INDEX   { pfIfIndex }
688	::= { pfIfTable 1 }
689
690PfIfEntry ::=
691	SEQUENCE {
692		pfIfIndex		Integer32,
693		pfIfDescr		DisplayString,
694		pfIfType		INTEGER,
695		pfIfRefs		Unsigned32,
696		pfIfRules		Unsigned32,
697		pfIfIn4PassPkts		Counter64,
698		pfIfIn4PassBytes	Counter64,
699		pfIfIn4BlockPkts	Counter64,
700		pfIfIn4BlockBytes	Counter64,
701		pfIfOut4PassPkts	Counter64,
702		pfIfOut4PassBytes	Counter64,
703		pfIfOut4BlockPkts	Counter64,
704		pfIfOut4BlockBytes	Counter64,
705		pfIfIn6PassPkts		Counter64,
706		pfIfIn6PassBytes	Counter64,
707		pfIfIn6BlockPkts	Counter64,
708		pfIfIn6BlockBytes	Counter64,
709		pfIfOut6PassPkts	Counter64,
710		pfIfOut6PassBytes	Counter64,
711		pfIfOut6BlockPkts	Counter64,
712		pfIfOut6BlockBytes	Counter64
713	}
714
715pfIfIndex OBJECT-TYPE
716	SYNTAX		Integer32 (1..2147483647)
717	MAX-ACCESS	read-only
718	STATUS		current
719	DESCRIPTION
720	"A unique value, greater than zero, for each interface.  It
721	is recommended that values are assigned contiguously
722	starting from 1.  The value for each interface sub-layer
723	must remain constant at least from one re-initialization of
724	the entity's network management system to the next re-
725	initialization."
726	::= { pfIfEntry 1 }
727
728pfIfDescr OBJECT-TYPE
729	SYNTAX		DisplayString
730	MAX-ACCESS	read-only
731	STATUS		current
732	DESCRIPTION
733	"The name of the interface."
734	::= { pfIfEntry 2 }
735
736pfIfType OBJECT-TYPE
737	SYNTAX 		INTEGER { group(0), instance(1), detached(2) }
738	MAX-ACCESS	read-only
739	STATUS		current
740	DESCRIPTION
741	"Denotes whether the interface is a group interface, an interface
742	instance, or whether it's been removed or destroyed."
743	::= { pfIfEntry 3 }
744
745pfIfRefs OBJECT-TYPE
746	SYNTAX		Unsigned32
747	MAX-ACCESS	read-only
748	STATUS		current
749	DESCRIPTION
750	"The number of state and/or source track entries which reference
751	the interface."
752	::= { pfIfEntry 4 }
753
754pfIfRules OBJECT-TYPE
755	SYNTAX		Unsigned32
756	MAX-ACCESS	read-only
757	STATUS		current
758	DESCRIPTION
759	"The number of rules which reference the interface."
760	::= { pfIfEntry 5 }
761
762pfIfIn4PassPkts OBJECT-TYPE
763	SYNTAX		Counter64
764	MAX-ACCESS	read-only
765	STATUS		current
766	DESCRIPTION
767	"The number of IPv4 packets passed in."
768	::= { pfIfEntry 6 }
769
770pfIfIn4PassBytes OBJECT-TYPE
771	SYNTAX		Counter64
772	MAX-ACCESS	read-only
773	STATUS		current
774	DESCRIPTION
775	"The number of IPv4 bytes passed in."
776	::= { pfIfEntry 7 }
777
778pfIfIn4BlockPkts OBJECT-TYPE
779	SYNTAX		Counter64
780	MAX-ACCESS	read-only
781	STATUS		current
782	DESCRIPTION
783	"The number of incoming IPv4 packets blocked."
784	::= { pfIfEntry 8 }
785
786pfIfIn4BlockBytes OBJECT-TYPE
787	SYNTAX		Counter64
788	MAX-ACCESS	read-only
789	STATUS		current
790	DESCRIPTION
791	"The number of incoming IPv4 bytes blocked."
792	::= { pfIfEntry 9 }
793
794pfIfOut4PassPkts OBJECT-TYPE
795	SYNTAX		Counter64
796	MAX-ACCESS	read-only
797	STATUS		current
798	DESCRIPTION
799	"The number of IPv4 packets passed out."
800	::= { pfIfEntry 10 }
801
802pfIfOut4PassBytes OBJECT-TYPE
803	SYNTAX		Counter64
804	MAX-ACCESS	read-only
805	STATUS		current
806	DESCRIPTION
807	"The number of IPv4 bytes passed out."
808	::= { pfIfEntry 11 }
809
810pfIfOut4BlockPkts OBJECT-TYPE
811	SYNTAX		Counter64
812	MAX-ACCESS	read-only
813	STATUS		current
814	DESCRIPTION
815	"The number of outgoing IPv4 packets blocked."
816	::= { pfIfEntry 12 }
817
818pfIfOut4BlockBytes OBJECT-TYPE
819	SYNTAX		Counter64
820	MAX-ACCESS	read-only
821	STATUS		current
822	DESCRIPTION
823	"The number of outgoing IPv4 bytes blocked."
824	::= { pfIfEntry 13 }
825
826pfIfIn6PassPkts OBJECT-TYPE
827	SYNTAX		Counter64
828	MAX-ACCESS	read-only
829	STATUS		current
830	DESCRIPTION
831	"The number of IPv6 packets passed in."
832	::= { pfIfEntry 14 }
833
834pfIfIn6PassBytes OBJECT-TYPE
835	SYNTAX		Counter64
836	MAX-ACCESS	read-only
837	STATUS		current
838	DESCRIPTION
839	"The number of IPv6 bytes passed in."
840	::= { pfIfEntry 15 }
841
842pfIfIn6BlockPkts OBJECT-TYPE
843	SYNTAX		Counter64
844	MAX-ACCESS	read-only
845	STATUS		current
846	DESCRIPTION
847	"The number of incoming IPv6 packets blocked."
848	::= { pfIfEntry 16 }
849
850pfIfIn6BlockBytes OBJECT-TYPE
851	SYNTAX		Counter64
852	MAX-ACCESS	read-only
853	STATUS		current
854	DESCRIPTION
855	"The number of incoming IPv6 bytes blocked."
856	::= { pfIfEntry 17 }
857
858pfIfOut6PassPkts OBJECT-TYPE
859	SYNTAX		Counter64
860	MAX-ACCESS	read-only
861	STATUS		current
862	DESCRIPTION
863	"The number of IPv6 packets passed out."
864	::= { pfIfEntry 18 }
865
866pfIfOut6PassBytes OBJECT-TYPE
867	SYNTAX		Counter64
868	MAX-ACCESS	read-only
869	STATUS		current
870	DESCRIPTION
871	"The number of IPv6 bytes passed out."
872	::= { pfIfEntry 19 }
873
874pfIfOut6BlockPkts OBJECT-TYPE
875	SYNTAX		Counter64
876	MAX-ACCESS	read-only
877	STATUS		current
878	DESCRIPTION
879	"The number of outgoing IPv6 packets blocked."
880	::= { pfIfEntry 20 }
881
882pfIfOut6BlockBytes OBJECT-TYPE
883	SYNTAX		Counter64
884	MAX-ACCESS	read-only
885	STATUS		current
886	DESCRIPTION
887	"The number of outgoing IPv6 bytes blocked."
888	::= { pfIfEntry 21 }
889
890
891-- pfTables
892
893pfTblNumber  OBJECT-TYPE
894	SYNTAX      Integer32
895	MAX-ACCESS  read-only
896	STATUS      current
897	DESCRIPTION
898	"The number of tables present on this system."
899	::= { pfTables 1 }
900
901pfTblTable OBJECT-TYPE
902	SYNTAX		SEQUENCE OF TblEntry
903	MAX-ACCESS	not-accessible
904	STATUS		current
905	DESCRIPTION
906	"A list of individual tables. The number of entries is
907	given by the value of tblNumber."
908	::= { pfTables 128 }
909
910pfTblEntry OBJECT-TYPE
911	SYNTAX      TblEntry
912	MAX-ACCESS  not-accessible
913	STATUS      current
914	DESCRIPTION
915	"An entry containing management information applicable to a
916	particular table."
917	INDEX   { pfTblIndex }
918	::= { pfTblTable 1 }
919
920TblEntry ::=
921	SEQUENCE {
922		pfTblIndex		Integer32,
923		pfTblName		SnmpAdminString,
924		pfTblAddresses		Integer32,
925		pfTblAnchorRefs		Integer32,
926		pfTblRuleRefs		Integer32,
927		pfTblEvalsMatch		Counter64,
928		pfTblEvalsNoMatch	Counter64,
929		pfTblInPassPkts		Counter64,
930		pfTblInPassBytes	Counter64,
931		pfTblInBlockPkts	Counter64,
932		pfTblInBlockBytes	Counter64,
933		pfTblInXPassPkts	Counter64,
934		pfTblInXPassBytes	Counter64,
935		pfTblOutPassPkts	Counter64,
936		pfTblOutPassBytes	Counter64,
937		pfTblOutBlockPkts	Counter64,
938		pfTblOutBlockBytes	Counter64,
939		pfTblOutXPassPkts	Counter64,
940		pfTblOutXPassBytes	Counter64,
941		pfTblStatsCleared	TimeTicks,
942		pfTblInMatchPkts	Counter64,
943		pfTblInMatchBytes	Counter64,
944		pfTblOutMatchPkts	Counter64,
945		pfTblOutMatchBytes	Counter64
946	}
947
948pfTblIndex OBJECT-TYPE
949	SYNTAX		Integer32 (1..2147483647)
950	MAX-ACCESS	read-only
951	STATUS		current
952	DESCRIPTION
953	"A unique value, greater than zero, for each table."
954	::= { pfTblEntry 1 }
955
956pfTblName OBJECT-TYPE
957	SYNTAX		SnmpAdminString
958	MAX-ACCESS	read-only
959	STATUS		current
960	DESCRIPTION
961	"The name of the table."
962	::= { pfTblEntry 2 }
963
964pfTblAddresses OBJECT-TYPE
965	SYNTAX		Integer32
966	MAX-ACCESS	read-only
967	STATUS		current
968	DESCRIPTION
969	"The number of addresses currently stored in the table."
970	::= { pfTblEntry 3 }
971
972pfTblAnchorRefs OBJECT-TYPE
973	SYNTAX		Integer32
974	MAX-ACCESS	read-only
975	STATUS		current
976	DESCRIPTION
977	"The number of anchors which reference the table."
978	::= { pfTblEntry 4 }
979
980pfTblRuleRefs OBJECT-TYPE
981	SYNTAX		Integer32
982	MAX-ACCESS	read-only
983	STATUS		current
984	DESCRIPTION
985	"The number of rules which reference the table."
986	::= { pfTblEntry 5 }
987
988pfTblEvalsMatch OBJECT-TYPE
989	SYNTAX		Counter64
990	MAX-ACCESS	read-only
991	STATUS		current
992	DESCRIPTION
993	"The number of table evaluations that produced a match."
994	::= { pfTblEntry 6 }
995
996pfTblEvalsNoMatch OBJECT-TYPE
997	SYNTAX		Counter64
998	MAX-ACCESS	read-only
999	STATUS		current
1000	DESCRIPTION
1001	"The number of table evaluations that didn't match."
1002	::= { pfTblEntry 7 }
1003
1004pfTblInPassPkts OBJECT-TYPE
1005	SYNTAX		Counter64
1006	MAX-ACCESS	read-only
1007	STATUS		current
1008	DESCRIPTION
1009	"The number of packets passed in that matched the table."
1010	::= { pfTblEntry 8 }
1011
1012pfTblInPassBytes OBJECT-TYPE
1013	SYNTAX		Counter64
1014	MAX-ACCESS	read-only
1015	STATUS		current
1016	DESCRIPTION
1017	"The number of bytes passed in that matched the table."
1018	::= { pfTblEntry 9 }
1019
1020pfTblInBlockPkts OBJECT-TYPE
1021	SYNTAX		Counter64
1022	MAX-ACCESS	read-only
1023	STATUS		current
1024	DESCRIPTION
1025	"The number of incoming packets blocked that matched the table."
1026	::= { pfTblEntry 10 }
1027
1028pfTblInBlockBytes OBJECT-TYPE
1029	SYNTAX		Counter64
1030	MAX-ACCESS	read-only
1031	STATUS		current
1032	DESCRIPTION
1033	"The number incoming bytes blocked that matched the table."
1034	::= { pfTblEntry 11 }
1035
1036pfTblInXPassPkts OBJECT-TYPE
1037	SYNTAX		Counter64
1038	MAX-ACCESS	read-only
1039	STATUS		current
1040	DESCRIPTION
1041	"The number of packets statefully passed in where the state
1042	entry refers to the table, but the table no longer contains
1043	the address in question."
1044	::= { pfTblEntry 12 }
1045
1046pfTblInXPassBytes OBJECT-TYPE
1047	SYNTAX		Counter64
1048	MAX-ACCESS	read-only
1049	STATUS		current
1050	DESCRIPTION
1051	"The number of bytes statefully passed in where the state
1052	entry refers to the table, but the table no longer contains
1053	the address in question."
1054	::= { pfTblEntry 13 }
1055
1056pfTblOutPassPkts OBJECT-TYPE
1057	SYNTAX		Counter64
1058	MAX-ACCESS	read-only
1059	STATUS		current
1060	DESCRIPTION
1061	"The number of packets passed out that matched the table."
1062	::= { pfTblEntry 14 }
1063
1064pfTblOutPassBytes OBJECT-TYPE
1065	SYNTAX		Counter64
1066	MAX-ACCESS	read-only
1067	STATUS		current
1068	DESCRIPTION
1069	"The number of bytes passed out that matched the table."
1070	::= { pfTblEntry 15 }
1071
1072pfTblOutBlockPkts OBJECT-TYPE
1073	SYNTAX		Counter64
1074	MAX-ACCESS	read-only
1075	STATUS		current
1076	DESCRIPTION
1077	"The number of outgoing packets blocked that matched the table."
1078	::= { pfTblEntry 16 }
1079
1080pfTblOutBlockBytes OBJECT-TYPE
1081	SYNTAX		Counter64
1082	MAX-ACCESS	read-only
1083	STATUS		current
1084	DESCRIPTION
1085	"The number outgoing bytes blocked that matched the table."
1086	::= { pfTblEntry 17 }
1087
1088pfTblOutXPassPkts OBJECT-TYPE
1089	SYNTAX		Counter64
1090	MAX-ACCESS	read-only
1091	STATUS		current
1092	DESCRIPTION
1093	"The number of packets statefully passed out where the state
1094	entry refers to the table, but the table no longer contains
1095	the address in question."
1096	::= { pfTblEntry 18 }
1097
1098pfTblOutXPassBytes OBJECT-TYPE
1099	SYNTAX		Counter64
1100	MAX-ACCESS	read-only
1101	STATUS		current
1102	DESCRIPTION
1103	"The number of bytes statefully passed out where the state
1104	entry refers to the table, but the table no longer contains
1105	the address in question."
1106	::= { pfTblEntry 19 }
1107
1108pfTblStatsCleared OBJECT-TYPE
1109	SYNTAX		TimeTicks
1110	UNITS		"1/100th of a Second"
1111	MAX-ACCESS	read-only
1112	STATUS		current
1113	DESCRIPTION
1114	"The number of seconds that have passed since the statistics
1115	for this pf table were zeroed."
1116	::= { pfTblEntry 20 }
1117
1118pfTblInMatchPkts OBJECT-TYPE
1119	SYNTAX		Counter64
1120	MAX-ACCESS	read-only
1121	STATUS		current
1122	DESCRIPTION
1123	"The number of inbound packets that hit a 'match' rule where this
1124	particular table was referenced by the rule."
1125	::= { pfTblEntry 21 }
1126
1127pfTblInMatchBytes OBJECT-TYPE
1128	SYNTAX		Counter64
1129	MAX-ACCESS	read-only
1130	STATUS		current
1131	DESCRIPTION
1132	"The total size in bytes of all inbound packets that hit a
1133	'match' rule where this particular table was referenced by
1134	the rule."
1135	::= { pfTblEntry 22 }
1136
1137pfTblOutMatchPkts OBJECT-TYPE
1138	SYNTAX		Counter64
1139	MAX-ACCESS	read-only
1140	STATUS		current
1141	DESCRIPTION
1142	"The number of outbound packets that hit a 'match' rule where this
1143	particular table was referenced by the rule."
1144	::= { pfTblEntry 23 }
1145
1146pfTblOutMatchBytes OBJECT-TYPE
1147	SYNTAX		Counter64
1148	MAX-ACCESS	read-only
1149	STATUS		current
1150	DESCRIPTION
1151	"The total size in bytes of all outbound packets that hit a
1152	'match' rule where this particular table was referenced by
1153	the rule."
1154	::= { pfTblEntry 24 }
1155
1156pfTblAddrTable OBJECT-TYPE
1157	SYNTAX		SEQUENCE OF TblAddrEntry
1158	MAX-ACCESS	not-accessible
1159	STATUS		current
1160	DESCRIPTION
1161	"A table containing the addresses/CIDR network blocks from
1162	every table on the system."
1163	::= { pfTables 129 }
1164
1165pfTblAddrEntry OBJECT-TYPE
1166	SYNTAX		TblAddrEntry
1167	MAX-ACCESS	not-accessible
1168	STATUS		current
1169	DESCRIPTION
1170	"An entry containing management information applicable to a
1171	particular table."
1172	INDEX		{ pfTblAddrTblIndex, pfTblAddrNet, pfTblAddrMask }
1173	::= { pfTblAddrTable 1 }
1174
1175TblAddrEntry ::=
1176	SEQUENCE {
1177		pfTblAddrTblIndex	Integer32,
1178		pfTblAddrNet		IpAddress,
1179		pfTblAddrMask		Integer32,
1180		pfTblAddrCleared	TimeTicks,
1181		pfTblAddrInBlockPkts	Counter64,
1182		pfTblAddrInBlockBytes	Counter64,
1183		pfTblAddrInPassPkts	Counter64,
1184		pfTblAddrInPassBytes	Counter64,
1185		pfTblAddrOutBlockPkts	Counter64,
1186		pfTblAddrOutBlockBytes	Counter64,
1187		pfTblAddrOutPassPkts	Counter64,
1188		pfTblAddrOutPassBytes	Counter64,
1189		pfTblAddrInMatchPkts	Counter64,
1190		pfTblAddrInMatchBytes	Counter64,
1191		pfTblAddrOutMatchPkts	Counter64,
1192		pfTblAddrOutMatchBytes	Counter64
1193	}
1194
1195pfTblAddrTblIndex OBJECT-TYPE
1196	SYNTAX		Integer32 (1..2147483647)
1197	MAX-ACCESS	read-only
1198	STATUS		current
1199	DESCRIPTION
1200	"The index value which uniquely identifies the table which
1201	contains this pfTblAddrNet/pfTblAddrMask pair."
1202	::= { pfTblAddrEntry 1 }
1203
1204pfTblAddrNet OBJECT-TYPE
1205	SYNTAX		IpAddress
1206	MAX-ACCESS	read-only
1207	STATUS		current
1208	DESCRIPTION
1209	"The IP address portion of the CIDR network for this
1210	particular table entry."
1211	::= { pfTblAddrEntry 2 }
1212
1213pfTblAddrMask OBJECT-TYPE
1214	SYNTAX		Integer32 (0..32)
1215	MAX-ACCESS	read-only
1216	STATUS		current
1217	DESCRIPTION
1218	"The CIDR bitmask for this particular table entry."
1219	::= { pfTblAddrEntry 3 }
1220
1221pfTblAddrCleared OBJECT-TYPE
1222	SYNTAX		TimeTicks
1223	UNITS      	"1/100th of a Second"
1224	MAX-ACCESS	read-only
1225	STATUS		current
1226	DESCRIPTION
1227	"The time that's passed since the statistics where last cleared, or
1228	since the pfTblAddrNet/pfTblAddrMask pair was loaded into the table,
1229	whichever is sooner."
1230	::= { pfTblAddrEntry 4 }
1231
1232pfTblAddrInBlockPkts OBJECT-TYPE
1233	SYNTAX		Counter64
1234	MAX-ACCESS	read-only
1235	STATUS		current
1236	DESCRIPTION
1237	"The number of inbound packets blocked as a result of matching
1238	this table entry."
1239	::= { pfTblAddrEntry 5 }
1240
1241pfTblAddrInBlockBytes OBJECT-TYPE
1242	SYNTAX		Counter64
1243	MAX-ACCESS	read-only
1244	STATUS		current
1245	DESCRIPTION
1246	"The number of inbound bytes blocked as a result of matching
1247	this table entry."
1248	::= { pfTblAddrEntry 6 }
1249
1250pfTblAddrInPassPkts OBJECT-TYPE
1251	SYNTAX		Counter64
1252	MAX-ACCESS	read-only
1253	STATUS		current
1254	DESCRIPTION
1255	"The number of inbound packets passed as a result of matching
1256	this table entry."
1257	::= { pfTblAddrEntry 7 }
1258
1259pfTblAddrInPassBytes OBJECT-TYPE
1260	SYNTAX		Counter64
1261	MAX-ACCESS	read-only
1262	STATUS		current
1263	DESCRIPTION
1264	"The number of inbound bytes passed as a result of matching
1265	this table entry."
1266	::= { pfTblAddrEntry 8 }
1267
1268pfTblAddrOutBlockPkts OBJECT-TYPE
1269	SYNTAX		Counter64
1270	MAX-ACCESS	read-only
1271	STATUS		current
1272	DESCRIPTION
1273	"The number of outbound packets blocked as a result of matching
1274	this table entry."
1275	::= { pfTblAddrEntry 9 }
1276
1277pfTblAddrOutBlockBytes OBJECT-TYPE
1278	SYNTAX		Counter64
1279	MAX-ACCESS	read-only
1280	STATUS		current
1281	DESCRIPTION
1282	"The number of outbound bytes blocked as a result of matching
1283	this table entry."
1284	::= { pfTblAddrEntry 10 }
1285
1286pfTblAddrOutPassPkts OBJECT-TYPE
1287	SYNTAX		Counter64
1288	MAX-ACCESS	read-only
1289	STATUS		current
1290	DESCRIPTION
1291	"The number of outbound packets passed as a result of matchin
1292	this table entry."
1293	::= { pfTblAddrEntry 11 }
1294
1295pfTblAddrOutPassBytes OBJECT-TYPE
1296	SYNTAX		Counter64
1297	MAX-ACCESS	read-only
1298	STATUS		current
1299	DESCRIPTION
1300	"The number of outbound bytes passed as a result of matchg
1301	this table entry."
1302	::= { pfTblAddrEntry 12 }
1303
1304pfTblAddrInMatchPkts OBJECT-TYPE
1305	SYNTAX		Counter64
1306	MAX-ACCESS	read-only
1307	STATUS		current
1308	DESCRIPTION
1309	"The number of inbound packets that hit a 'match' rule where
1310	this table entry was referenced."
1311	::= { pfTblAddrEntry 13 }
1312
1313pfTblAddrInMatchBytes OBJECT-TYPE
1314	SYNTAX		Counter64
1315	MAX-ACCESS	read-only
1316	STATUS		current
1317	DESCRIPTION
1318	"The total size in bytes of all inbound packets that hit
1319	a 'match' rule where this table entry was referenced."
1320	::= { pfTblAddrEntry 14 }
1321
1322pfTblAddrOutMatchPkts OBJECT-TYPE
1323	SYNTAX		Counter64
1324	MAX-ACCESS	read-only
1325	STATUS		current
1326	DESCRIPTION
1327	"The number of outbound packets that hit a 'match' rule where
1328	this table entry was referenced."
1329	::= { pfTblAddrEntry 15 }
1330
1331pfTblAddrOutMatchBytes OBJECT-TYPE
1332	SYNTAX		Counter64
1333	MAX-ACCESS	read-only
1334	STATUS		current
1335	DESCRIPTION
1336	"The total size in bytes of all outbound packets that hit
1337	a 'match' rule where this table entry was referenced."
1338	::= { pfTblAddrEntry 16 }
1339
1340
1341-- pfLabels
1342
1343pfLabelNumber  OBJECT-TYPE
1344	SYNTAX      Integer32
1345	MAX-ACCESS  read-only
1346	STATUS      current
1347	DESCRIPTION
1348	"The number of labels in the active pf ruleset."
1349	::= { pfLabels 1 }
1350
1351pfLabelTable OBJECT-TYPE
1352	SYNTAX		SEQUENCE OF PfLabelEntry
1353	MAX-ACCESS	not-accessible
1354	STATUS		current
1355	DESCRIPTION
1356	"A list of individual labels. The number of entries is
1357	given by the value of pfLabelNumber."
1358	::= { pfLabels 128 }
1359
1360pfLabelEntry OBJECT-TYPE
1361	SYNTAX      PfLabelEntry
1362	MAX-ACCESS  not-accessible
1363	STATUS      current
1364	DESCRIPTION
1365	"An entry containing management information applicable to a
1366	particular label."
1367	INDEX   { pfLabelIndex }
1368	::= { pfLabelTable 1 }
1369
1370PfLabelEntry ::=
1371	SEQUENCE {
1372		pfLabelIndex		Integer32,
1373		pfLabelName		SnmpAdminString,
1374		pfLabelEvals		Counter64,
1375		pfLabelPkts		Counter64,
1376		pfLabelBytes		Counter64,
1377		pfLabelInPkts		Counter64,
1378		pfLabelInBytes		Counter64,
1379		pfLabelOutPkts		Counter64,
1380		pfLabelOutBytes		Counter64,
1381		pfLabelTotalStates	Counter32
1382	}
1383
1384pfLabelIndex OBJECT-TYPE
1385	SYNTAX		Integer32 (1..2147483647)
1386	MAX-ACCESS	read-only
1387	STATUS		current
1388	DESCRIPTION
1389	"A unique value, greater than zero, for each label."
1390	::= { pfLabelEntry 1 }
1391
1392pfLabelName OBJECT-TYPE
1393	SYNTAX		SnmpAdminString
1394	MAX-ACCESS	read-only
1395	STATUS		current
1396	DESCRIPTION
1397	"The name of the label."
1398	::= { pfLabelEntry 2 }
1399
1400pfLabelEvals OBJECT-TYPE
1401	SYNTAX		Counter64
1402	MAX-ACCESS	read-only
1403	STATUS		current
1404	DESCRIPTION
1405	"The number of rule evaluations."
1406	::= { pfLabelEntry 3 }
1407
1408pfLabelPkts OBJECT-TYPE
1409	SYNTAX		Counter64
1410	MAX-ACCESS	read-only
1411	STATUS		current
1412	DESCRIPTION
1413	"The total number of packets matched by the rule."
1414	::= { pfLabelEntry 4 }
1415
1416pfLabelBytes OBJECT-TYPE
1417	SYNTAX		Counter64
1418	MAX-ACCESS	read-only
1419	STATUS		current
1420	DESCRIPTION
1421	"The total number of bytes matched by the rule."
1422	::= { pfLabelEntry 5 }
1423
1424pfLabelInPkts OBJECT-TYPE
1425	SYNTAX		Counter64
1426	MAX-ACCESS	read-only
1427	STATUS		current
1428	DESCRIPTION
1429	"The number of incoming packets matched by the rule."
1430	::= { pfLabelEntry 6 }
1431
1432pfLabelInBytes OBJECT-TYPE
1433	SYNTAX		Counter64
1434	MAX-ACCESS	read-only
1435	STATUS		current
1436	DESCRIPTION
1437	"The number of incoming bytes matched by the rule."
1438	::= { pfLabelEntry 7 }
1439
1440pfLabelOutPkts OBJECT-TYPE
1441	SYNTAX		Counter64
1442	MAX-ACCESS	read-only
1443	STATUS		current
1444	DESCRIPTION
1445	"The number of outgoing packets matched by the rule."
1446	::= { pfLabelEntry 8 }
1447
1448pfLabelOutBytes OBJECT-TYPE
1449	SYNTAX		Counter64
1450	MAX-ACCESS	read-only
1451	STATUS		current
1452	DESCRIPTION
1453	"The number of outgoing bytes matched by the rule."
1454	::= { pfLabelEntry 9 }
1455
1456pfLabelTotalStates OBJECT-TYPE
1457	SYNTAX		Counter32
1458	MAX-ACCESS	read-only
1459	STATUS		current
1460	DESCRIPTION
1461	"The total number of state table entries created by this rule
1462	since the ruleset was loaded."
1463	::= { pfLabelEntry 10 }
1464
1465
1466-- pfsyncStats
1467
1468pfsyncIpPktsRecv OBJECT-TYPE
1469	SYNTAX		Counter64
1470	MAX-ACCESS	read-only
1471	STATUS		current
1472	DESCRIPTION
1473	"Number of IPv4 pfsync packets received on all interfaces."
1474	::= { pfsyncStats 1 }
1475
1476pfsyncIp6PktsRecv OBJECT-TYPE
1477	SYNTAX		Counter64
1478	MAX-ACCESS	read-only
1479	STATUS		current
1480	DESCRIPTION
1481	"Number of IPv6 pfsync packets received on all interfaces."
1482	::= { pfsyncStats 2 }
1483
1484pfsyncPktDiscardsForBadInterface OBJECT-TYPE
1485	SYNTAX		Counter64
1486	MAX-ACCESS	read-only
1487	STATUS		current
1488	DESCRIPTION
1489	"Number of pfsync packets discarded because it was received
1490	on an interface that is not running pfsync."
1491	::= { pfsyncStats 3 }
1492
1493pfsyncPktDiscardsForBadTtl OBJECT-TYPE
1494	SYNTAX		Counter64
1495	MAX-ACCESS	read-only
1496	STATUS		current
1497	DESCRIPTION
1498	"Number of pfsync packets discarded due to having a TTL less
1499	than 255."
1500	::= { pfsyncStats 4 }
1501
1502pfsyncPktShorterThanHeader OBJECT-TYPE
1503	SYNTAX		Counter64
1504	MAX-ACCESS	read-only
1505	STATUS		current
1506	DESCRIPTION
1507	"Number of pfsync packets received that had a length shorter
1508	than the pfsync packet header."
1509	::= { pfsyncStats 5 }
1510
1511pfsyncPktDiscardsForBadVersion OBJECT-TYPE
1512	SYNTAX		Counter64
1513	MAX-ACCESS	read-only
1514	STATUS		current
1515	DESCRIPTION
1516	"Number of pfsync packets discarded due to incorrect protocol
1517	version."
1518	::= { pfsyncStats 6 }
1519
1520pfsyncPktDiscardsForBadAction OBJECT-TYPE
1521	SYNTAX		Counter64
1522	MAX-ACCESS	read-only
1523	STATUS		current
1524	DESCRIPTION
1525	"Number of pfsync packets discarded due to an invalid pfsync
1526	action in the header."
1527	::= { pfsyncStats 7 }
1528
1529pfsyncPktDiscardsForBadLength OBJECT-TYPE
1530	SYNTAX		Counter64
1531	MAX-ACCESS	read-only
1532	STATUS		current
1533	DESCRIPTION
1534	"Number of pfsync packets discarded due to incorrect size."
1535	::= { pfsyncStats 8 }
1536
1537pfsyncPktDiscardsForBadAuth OBJECT-TYPE
1538	SYNTAX		Counter64
1539	MAX-ACCESS	read-only
1540	STATUS		current
1541	DESCRIPTION
1542	"Number of pfsync packets discarded due to authentication failure."
1543	::= { pfsyncStats 9 }
1544
1545pfsyncPktDiscardsForStaleState OBJECT-TYPE
1546	SYNTAX		Counter64
1547	MAX-ACCESS	read-only
1548	STATUS		current
1549	DESCRIPTION
1550	"Number of pfsync packets discarded because they tried to update
1551	a stale state entry."
1552	::= { pfsyncStats 10 }
1553
1554pfsyncPktDiscardsForBadValues OBJECT-TYPE
1555	SYNTAX		Counter64
1556	MAX-ACCESS	read-only
1557	STATUS		current
1558	DESCRIPTION
1559	"Number of pfsync packets discarded due to containing bad values."
1560	::= { pfsyncStats 11 }
1561
1562pfsyncPktDiscardsForBadState OBJECT-TYPE
1563	SYNTAX		Counter64
1564	MAX-ACCESS	read-only
1565	STATUS		current
1566	DESCRIPTION
1567	"Number of pfsync packets discarded due to state insert/lookup
1568	failure."
1569	::= { pfsyncStats 12 }
1570
1571pfsyncIpPktsSent OBJECT-TYPE
1572	SYNTAX		Counter64
1573	MAX-ACCESS	read-only
1574	STATUS		current
1575	DESCRIPTION
1576	"Number of IPv4 pfsync packets sent on all interfaces."
1577	::= { pfsyncStats 13 }
1578
1579pfsyncIp6PktsSent OBJECT-TYPE
1580	SYNTAX		Counter64
1581	MAX-ACCESS	read-only
1582	STATUS		current
1583	DESCRIPTION
1584	"Number of IPv6 pfsync packets sent on all interfaces."
1585	::= { pfsyncStats 14 }
1586
1587pfsyncNoMemory OBJECT-TYPE
1588	SYNTAX		Counter64
1589	MAX-ACCESS	read-only
1590	STATUS		current
1591	DESCRIPTION
1592	"Number of pfsync packets which could not be sent due to
1593	insufficient memory."
1594	::= { pfsyncStats 15 }
1595
1596pfsyncOutputErrors OBJECT-TYPE
1597	SYNTAX		Counter64
1598	MAX-ACCESS	read-only
1599	STATUS		current
1600	DESCRIPTION
1601	"Number of pfsync packets which could not be sent."
1602	::= { pfsyncStats 16 }
1603
1604END
1605
1606