CISCO-NETFLOW-MIB
AI MIB Summary
The CISCO-NETFLOW-MIB enables SNMP-based retrieval of Cisco NetFlow cache states, export configurations, protocol statistics, and Version 9 template definitions from NetFlow-enabled routers and switches. It specifically facilitates real-time monitoring of top N flows for traffic analysis and DoS detection, alongside tracking egress/ingress flow classifications and collector export metrics.
The Netflow MIB provides a simple and easy method to get NetFlow cache information, current NetFlow configuration and statistics. It will enable medium to small size enterprises to take advantage of NetFlow technology over SNMP at a reduced infrastructure cost. The MIB is created to provide Netflow information in these areas:
1. Cache information and configuration.
2. Export information and configuration.
4. Export Statistics.
5. Protocol Statistics.
6. Version 9 Export Template information.
7. Top Flows information.
Terminology used
Flow A flow is defined as an unidirectional sequence of packets between a given source and destination endpoints. Network flows are highly granular; flow endpoints are identified both by IP address as well as by transport layer application port numbers. NetFlow also utilizes the IP Protocol type, Type of Service (ToS) and the input interface identifier to uniquely identify flows.
Exporter A device (for example, a router) with NetFlow services enabled. The exporter monitors packets entering an observation point and creates flows out of these packets. The information from these flows are exported in the form of Flow Records to the collector.
Flow Record A Flow Record provides information about an IP Flow that exists on the Exporter. The Flow Records are commonly referred to as NetFlow Services data or NetFlow data.
Collector The NetFlow Collector receives Flow Records from one or more Exporters. It processes the received export packet, i.e. parses, stores the Flow Record information. The flow records may be optionally aggregated before storing into the hard disk.
Template NetFlow Version 9 Export format is template based. Version 9 record format consists of a packet header followed by at least one or more template or data FlowSets. A template FlowSet (collection of one or more template) provides a description of the fields that will be present in future data FlowSets. Templates provide an extensible design to the record format, a feature that should allow future enhancements to NetFlow services without requiring concurrent changes to the basic flow-record format.
One additional record type is also a part of Version 9 specification: an options template. Rather than supplying information about IP flows, options are used to supply meta-data about the NetFlow process itself.
Top Flows.
This feature provides a mechanism which allows the top N flows in the netflow cache to be viewed in real time.
Criteria can be set to limit the feature to particular flows of interest, which can aid in DoS detection.
Only the number of flows (TopN) and the sort criteria (SortBy) need be set.
Top Flows is not intended as a mechanism for exporting the entire netflow cache.
Egress flows.
This feature provides a mechanism to identify a flow as either an ingress or an egress flow.
Main OID:
ciscoNetflowMIB.1.3.6.1.4.1.9.9.387
141
Objects
Active
Status
7
Dependencies
Imported Objects
Objects
141 total| Object Name |
|---|
ciscoNetflowMIBThe Netflow MIB provides a simple and easy method
to get NetFlow cache information, current NetFlow
configuration and statistics. It will enable medium to
small size enterprises to take advantage of NetFlow
technology over SNMP at a reduced infrastructure cost.
The MIB is created to provide Netflow information in
these areas:
1. Cache information and configuration.
2. Export information and configuration.
4. Export Statistics.
5. Protocol Statistics.
6. Version 9 Export Template information.
7. Top Flows information.
Terminology used
Flow
A flow is defined as an unidirectional sequence of
packets between a given source and destination
endpoints. Network flows are highly granular;
flow endpoints are identified both by IP address as
well as by transport layer application port numbers.
NetFlow also utilizes the IP Protocol type,
Type of Service (ToS) and the input interface
identifier to uniquely identify flows.
Exporter
A device (for example, a router) with NetFlow
services enabled. The exporter monitors packets
entering an observation point and creates flows out
of these packets. The information from these flows
are exported in the form of Flow Records to
the collector.
Flow Record
A Flow Record provides information about an IP Flow
that exists on the Exporter. The Flow Records are
commonly referred to as NetFlow Services data or
NetFlow data.
Collector
The NetFlow Collector receives Flow Records from
one or more Exporters. It processes the received
export packet, i.e. parses, stores the Flow Record
information. The flow records may be optionally
aggregated before storing into the hard disk.
Template
NetFlow Version 9 Export format is template based.
Version 9 record format consists of a packet header
followed by at least one or more template or data
FlowSets. A template FlowSet (collection of one or more
template) provides a description of the fields that
will be present in future data FlowSets. Templates
provide an extensible design to the record format,
a feature that should allow future enhancements to
NetFlow services without requiring concurrent changes
to the basic flow-record format.
One additional record type is also a part of
Version 9 specification: an options template. Rather
than supplying information about IP flows, options are
used to supply meta-data about the NetFlow process
itself.
Top Flows.
This feature provides a mechanism which allows the
top N flows in the netflow cache to be viewed
in real time.
Criteria can be set to limit the feature to particular
flows of interest, which can aid in DoS detection.
Only the number of flows (TopN) and the sort criteria
(SortBy) need be set.
Top Flows is not intended as a mechanism for exporting
the entire netflow cache.
Egress flows.
This feature provides a mechanism to identify a flow
as either an ingress or an egress flow. MODULE-IDENTITY .1.3.6.1.4.1.9.9.387 |
ciscoNetflowMIBNotifs OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.387.0 |
ciscoNetflowMIBObjects OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.387.1 |
cnfCacheInfo OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.387.1.1 |
cnfCIInterfaceTableThis table provides Netflow Enable information per interface. SEQUENCE OF CnfCIInterfaceEntry .1.3.6.1.4.1.9.9.387.1.1.1 |
cnfCIInterfaceEntryA conceptual row in the cnfCIInterfaceEntry. CnfCIInterfaceEntry .1.3.6.1.4.1.9.9.387.1.1.1.1 |
cnfCINetflowEnableIndicates whether the netflow feature is enabled for this
interface, and if so, in which directions.rw NfInterfaceDirectionTypes .1.3.6.1.4.1.9.9.387.1.1.1.1.1 |
cnfCIMcastNetflowEnableIndicates whether the multicast netflow accounting feature
is enabled for this interface, and if so, in which
directions.rw NfInterfaceDirectionTypes .1.3.6.1.4.1.9.9.387.1.1.1.1.2 |
cnfCICacheTableA table containing configuration and statistics per cache.
Cache may be main cache or an aggregation cache. SEQUENCE OF CnfCICacheEntry .1.3.6.1.4.1.9.9.387.1.1.2 |
cnfCICacheEntryA conceptual row in the cnfCICacheEntry. CnfCICacheEntry .1.3.6.1.4.1.9.9.387.1.1.2.1 |
cnfCICacheTypeThe type of netflow cache.
NetFlow aggregation maintains one or more extra flow caches
with different combinations of fields that determine
which traditional flows are grouped together. NfCacheTypes .1.3.6.1.4.1.9.9.387.1.1.2.1.1 |
cnfCICacheEnableIndicates whether netflow is enabled for this cache type.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.387.1.1.2.1.2 |
cnfCICacheEntriesThe number of entries that can be cached for this cache type.
The accepted value could be limited based on the amount of
memory available in the system.rw Unsigned32 .1.3.6.1.4.1.9.9.387.1.1.2.1.3 |
cnfCIActiveFlowsNumber of currently active flow entries.ro Unsigned32 .1.3.6.1.4.1.9.9.387.1.1.2.1.4 |
cnfCIInactiveFlowsNumber of available flow entries.ro Unsigned32 .1.3.6.1.4.1.9.9.387.1.1.2.1.5 |
cnfCIActiveTimeOutThe timeout period (in minutes) for removing active flows
from the cache.rw Unsigned32 UNITS "minutes" .1.3.6.1.4.1.9.9.387.1.1.2.1.6 |
cnfCIInactiveTimeOutThe timeout period (in seconds) for removing inactive flows
from the cache.rw Unsigned32 UNITS "seconds" .1.3.6.1.4.1.9.9.387.1.1.2.1.7 |
cnfCIMinSourceMaskSource route's minimum configured mask bits. This is used to
configure the minimum mask for Router Based Aggregation
(RBA). Minimum masking capability is available only if RBA is
enabled. A value of 0 indicates that this object is not
applicable to this cache type.rw InetAddressPrefixLength (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.387.1.1.2.1.8 |
cnfCIMinDestinationMaskDestination route's minimum configured mask bits. This is used
to configure the minimum mask for Router Based Aggregation
(RBA). Minimum masking capability is available only if RBA is
enabled. A value of 0 indicates that this object is not
applicable to this cache type.rw InetAddressPrefixLength (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.387.1.1.2.1.9 |
cnfCIBridgedFlowStatsCtrlTableThis table controls the reporting of bridged flow statistics
per vlan. SEQUENCE OF CnfCIBridgedFlowStatsCtrlEntry .1.3.6.1.4.1.9.9.387.1.1.3 |
cnfCIBridgedFlowStatsCtrlEntryA conceptual row in the cnfCIBridgedFlowStatsCtrlTable,
containing the configuration of bridged flow statistics
per vlan. When a vlan is created in a device supporting
this table, a corresponding entry will be added to this
table. CnfCIBridgedFlowStatsCtrlEntry .1.3.6.1.4.1.9.9.387.1.1.3.1 |
cnfCIBridgedFlowVlanIndicates the Vlan number on which the reporting of
bridged flow statistics is configured. VlanIndex (Q-BRIDGE-MIB) .1.3.6.1.4.1.9.9.387.1.1.3.1.1 |
cnfCIBridgedFlowStatsCrtEnableIndicates whether the bridged flow creation is enabled
for this vlan.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.387.1.1.3.1.2 |
cnfCIBridgedFlowStatsExpEnableIndicates whether the export of bridged flow statistics
is enabled for this vlan.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.387.1.1.3.1.3 |
cnfCIMcastNetflowRPFFailedEnableIndicates whether netflow accounting for multicast data
that fails the reverse path forwarding (RPF) check is
enabled.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.387.1.1.4 |
cnfExportInfo OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.387.1.2 |
cnfEIExportInfoTableA table containing information about export configuration per
cache type. SEQUENCE OF CnfEIExportInfoEntry .1.3.6.1.4.1.9.9.387.1.2.1 |
cnfEIExportInfoEntryA conceptual row in the cnfEIExportInfoEntry. CnfEIExportInfoEntry .1.3.6.1.4.1.9.9.387.1.2.1.1 |
cnfEIExportVersionThe NetFlow data export version.rw Unsigned32 .1.3.6.1.4.1.9.9.387.1.2.1.1.1 |
cnfEIPeerASThis object enables collection of AS numbers from a peer
autonomous system. cnfEIPeerAS, cnfEIOriginAS and
cnfEIBgpNextHop are interdependent.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.387.1.2.1.1.2 |
cnfEIOriginASThis object enables collection of AS numbers from an origin
autonomous system. cnfEIPeerAS, cnfEIOriginAS and
cnfEIBgpNextHop are interdependent.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.387.1.2.1.1.3 |
cnfEIBgpNextHopThis object enables collection of BGP Next Hops. cnfEIPeerAS,
cnfEIOriginAS and cnfEIBgpNextHop are interdependent.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.387.1.2.1.1.4 |
cnfEIMaxCollectorsMaximum number of entries allowed in the cnfEICollectorTable
for each cache type.
A zero indicates export is not supported in the device.
The agent should set this value during initialization, and
the value for this object cannot be changed during the
system's operation.ro Unsigned32 .1.3.6.1.4.1.9.9.387.1.2.2 |
cnfEICollectorTableA control table to configure the collectors that the netflow
packets are exported to. The number of entries that can be
configured for the cache type is limited by the value of
cnfEIMaxCollectors. SEQUENCE OF CnfEICollectorEntry .1.3.6.1.4.1.9.9.387.1.2.3 |
cnfEICollectorEntryA conceptual row in the cnfEICollectorEntry. CnfEICollectorEntry .1.3.6.1.4.1.9.9.387.1.2.3.1 |
cnfEICollectorAddressTypeThe type of Internet address used by this entry. InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.387.1.2.3.1.1 |
cnfEICollectorAddressThe Internet address of the collector. This is the
address which the Netflow data is exported to. InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.387.1.2.3.1.2 |
cnfEICollectorPortThe transport port of the collector which the Netflow data is
exported to. InetPortNumber (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.387.1.2.3.1.3 |
cnfEICollectorStatusThis object is used to create or delete an entry
in the cnfEICollectorTable.
* A row may be created using the 'CreateAndGo' option. When
the row is successfully created, the RowStatus would be
set to 'active' by the agent.
* A row may be deleted by setting the RowStatus to 'destroy'.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.9.9.387.1.2.3.1.4 |
cnfExportStatistics OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.387.1.4 |
cnfESSampledPacketNumber of Sampled Packet.ro Counter32 .1.3.6.1.4.1.9.9.387.1.4.1 |
cnfESExportRateNumber of Bytes exported per second.ro Counter32 UNITS "bytes per second" .1.3.6.1.4.1.9.9.387.1.4.2 |
cnfESRecordsExportedNumber of flow statistics records which were exported.ro Counter32 .1.3.6.1.4.1.9.9.387.1.4.3 |
cnfESPktsExportedNumber of packets (udp datagrams) which were exported.ro Counter32 .1.3.6.1.4.1.9.9.387.1.4.4 |
cnfESPktsFailedNumber of times a flow record could not be exported because of
a pak allocation failure.ro Counter32 .1.3.6.1.4.1.9.9.387.1.4.5 |
cnfESPktsDroppedNumber of export packets which were dropped at the time of
ipwrite operation. The reasons for this failure are no FIB,
adjacency failure, MTU failed, enqueue failed, IPC failed etc.ro Counter32 .1.3.6.1.4.1.9.9.387.1.4.6 |
cnfProtocolStatistics OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.387.1.5 |
cnfPSPacketSizeDistributionA string contain IP Packet Size Distribution statistics.
Distribution grouping are following :1-32 64 96 128
160 192 224 256 288 320 352 384 416 448 480 512
544 576 1024 1536 2048 2560 3072 3584 4096 4608. Value for
each group will be expressed in 2 bytes (in Network byte
order) and need to divide by 1000 to get the exact value
given by CLI using show ip cache flow command.ro OCTET STRING .1.3.6.1.4.1.9.9.387.1.5.1 |
cnfPSLastClearElapsedTimeObject indicates time in millisecond since the last clearing
time of protocol statistics.ro Gauge32 UNITS "milliseconds" .1.3.6.1.4.1.9.9.387.1.5.2 |
cnfPSProtocolStatTableA table containing statistics per protocol.
Information sorted in this table is global in nature (i.e. it's
updated for all line cards where netflow is enabled) and
follows the Counter64 semantics as described in RFC 2578. SEQUENCE OF CnfPSProtocolStatEntry .1.3.6.1.4.1.9.9.387.1.5.3 |
cnfPSProtocolStatEntryA conceptual row in the CnfPSProtocolStatEntry. CnfPSProtocolStatEntry .1.3.6.1.4.1.9.9.387.1.5.3.1 |
cnfPSProtocolTypeThis object is used as INDEX for protocol statistic table.
Protocol type consists of groups based on well known ports
and protocols. NfProtocolTypes .1.3.6.1.4.1.9.9.387.1.5.3.1.1 |
cnfPSExpiredFlowsNumber of flows belonging to the same protocol and port
that were expired. This counter is incremented when a flow
expires due to some reason like time out of flows,
event based aging etc.ro Counter64 .1.3.6.1.4.1.9.9.387.1.5.3.1.2 |
cnfPSPacketsNumber of Packets belonging to the same protocol and port
which were switched by netflow enabled interface(s).
This counter contains the number of Packets switched by all
netflow enabled line cards.ro Counter64 .1.3.6.1.4.1.9.9.387.1.5.3.1.3 |
cnfPSBytesNumber of Bytes belonging to the same protocol and port,
which were switched by netflow enabled interface(s).
This counter contains the number of Packets switched by all
netflow enabled line cards.ro Counter64 .1.3.6.1.4.1.9.9.387.1.5.3.1.4 |
cnfPSActiveThis is a summation of active time of all flows belonging to
the same protocol and port in milliseconds. The time between
first switched packet and last switched packet is measured as
the active time of a flow.ro Counter64 UNITS "milliseconds" .1.3.6.1.4.1.9.9.387.1.5.3.1.5 |
cnfPSInactiveThis is a summation of inactive time of all flows belonging to
the same protocol and port in milliseconds. The time between
the last switched packet and expiry of a flow is measured as
the inactive time of a flow.ro Counter64 UNITS "milliseconds" .1.3.6.1.4.1.9.9.387.1.5.3.1.6 |
cnfExportTemplate OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.387.1.6 |
cnfTemplateOptionsFlagObject to indicate Sub- technologies in option template.ro Unsigned32 .1.3.6.1.4.1.9.9.387.1.6.1 |
cnfTemplateTableA control table to provide statistics of version 9
Flow and Option templates. SEQUENCE OF CnfTemplateEntry .1.3.6.1.4.1.9.9.387.1.6.2 |
cnfTemplateEntryA conceptual row in the cnfTemplateEntry. CnfTemplateEntry .1.3.6.1.4.1.9.9.387.1.6.2.1 |
cnfTemplateTypeDefines the structure and interpretation of fields in a data
record and serves as an INDEX in this table. Version 9 has two
types of Templates: Flow Templates and Option Templates. NfTemplateTypes .1.3.6.1.4.1.9.9.387.1.6.2.1.1 |
cnfTemplateAddedNumber of templates added.ro Unsigned32 .1.3.6.1.4.1.9.9.387.1.6.2.1.2 |
cnfTemplateActiveNumber of active templates.ro Unsigned32 .1.3.6.1.4.1.9.9.387.1.6.2.1.3 |
cnfTemplateAgerPollsNumber of template ager polls.ro Unsigned32 .1.3.6.1.4.1.9.9.387.1.6.2.1.4 |
cnfTemplateExportInfoTableA control table providing information about version 9. SEQUENCE OF CnfTemplateExportInfoEntry .1.3.6.1.4.1.9.9.387.1.6.3 |
cnfTemplateExportInfoEntryA conceptual row in the cnfTemplateExportInfoEntry. CnfTemplateExportInfoEntry .1.3.6.1.4.1.9.9.387.1.6.3.1 |
cnfTemplateExportVer9EnableObject to indicate whether version 9 export is configured
or not.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.387.1.6.3.1.1 |
cnfTemplateExportVer9TplTimeoutExport template time out.
Templates are resent after this time.rw Unsigned32 UNITS "minutes" .1.3.6.1.4.1.9.9.387.1.6.3.1.2 |
cnfTemplateExportVer9OptTimeoutExport option time out.
Options are resent after this time.rw Unsigned32 UNITS "minutes" .1.3.6.1.4.1.9.9.387.1.6.3.1.3 |
cnfTemplateExportVer9TplRefreshRateTemplate refresh rate.
Templates are resent after this many packets.rw Unsigned32 UNITS "packets" .1.3.6.1.4.1.9.9.387.1.6.3.1.4 |
cnfTemplateExportVer9OptRefreshRateOption refresh rate.
Options are resent after this many packets.rw Unsigned32 UNITS "packets" .1.3.6.1.4.1.9.9.387.1.6.3.1.5 |
cnfTopFlows OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.387.1.7 |
cnfTopFlowsTimeStampIndicates the time when cnfTopFlowsTable was last updated.ro TimeStamp (SNMPv2-TC) .1.3.6.1.4.1.9.9.387.1.7.1 |
cnfTopFlowsTopNMaximum number of top flows to calculate.
A value of 0 disables the Top Flows feature.rw Unsigned32 .1.3.6.1.4.1.9.9.387.1.7.2 |
cnfTopFlowsAvailableFlowsThe number of entries currently available in cnfTopFlowsTable.ro Unsigned32 .1.3.6.1.4.1.9.9.387.1.7.3 |
cnfTopFlowsMatchingFlowsTotal number of matching flows in the netflow cache.ro Unsigned32 .1.3.6.1.4.1.9.9.387.1.7.4 |
cnfTopFlowsTotalFlowsTotal number of flows in the netflow cache.ro Unsigned32 .1.3.6.1.4.1.9.9.387.1.7.5 |
cnfTopFlowsSortByIndicates how the entries in cnfTopFLowsTable are to be sorted.
A value of 'noSort' disables Top Flows.rw NfTopFlowsSortTypes .1.3.6.1.4.1.9.9.387.1.7.6 |
cnfTopFlowsCacheTimeoutTop Flows Cache timeout. Top flows are cached for this length
of time and not recalculated. Configure a high value to ensure
the cache does not change during long queries.
Setting this object (to any value) will expire the cache.rw Unsigned32 UNITS "milliseconds" .1.3.6.1.4.1.9.9.387.1.7.7 |
cnfTopFlowsTableTable of flows which have accrued the highest packets or bytes.
Each row in the table represents one flow from the cache. SEQUENCE OF CnfTopFlowsTableEntry .1.3.6.1.4.1.9.9.387.1.7.8 |
cnfTopFlowsTableEntryA conceptual row in the cnfTopFlowsTable. CnfTopFlowsTableEntry .1.3.6.1.4.1.9.9.387.1.7.8.1 |
cnfTopFlowsIndexIndex to select top flows.
A value of 1 selects the topmost flow. Unsigned32 .1.3.6.1.4.1.9.9.387.1.7.8.1.1 |
cnfTopFlowsSrcAddressTypeType of source address.ro InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.387.1.7.8.1.2 |
cnfTopFlowsSrcAddressSource address.ro InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.387.1.7.8.1.3 |
cnfTopFlowsSrcAddressMaskNumber of bits in source address mask.ro InetAddressPrefixLength (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.387.1.7.8.1.4 |
cnfTopFlowsDstAddressTypeType of destination address.ro InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.387.1.7.8.1.5 |
cnfTopFlowsDstAddressDestination address.ro InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.387.1.7.8.1.6 |
cnfTopFlowsDstAddressMaskNumber of bits in destination address mask.ro InetAddressPrefixLength (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.387.1.7.8.1.7 |
cnfTopFlowsNhAddressTypeThe type of nexthop address.ro InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.387.1.7.8.1.8 |
cnfTopFlowsNhAddressNexthop address.ro InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.387.1.7.8.1.9 |
cnfTopFlowsSrcPortSource port number.ro InetPortNumber (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.387.1.7.8.1.10 |
cnfTopFlowsDstPortDestination port number.ro InetPortNumber (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.387.1.7.8.1.11 |
cnfTopFlowsSrcASSource AS number.ro InetAutonomousSystemNumber (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.387.1.7.8.1.12 |
cnfTopFlowsDstASDestination AS number.ro InetAutonomousSystemNumber (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.387.1.7.8.1.13 |
cnfTopFlowsInputIfIndexInput interface index.ro InterfaceIndex (IF-MIB) .1.3.6.1.4.1.9.9.387.1.7.8.1.14 |
cnfTopFlowsOutputIfIndexOutput interface index.ro InterfaceIndex (IF-MIB) .1.3.6.1.4.1.9.9.387.1.7.8.1.15 |
cnfTopFlowsFirstSwitchedTime flow was first switched.ro TimeStamp (SNMPv2-TC) .1.3.6.1.4.1.9.9.387.1.7.8.1.16 |
cnfTopFlowsLastSwitchedTime flow was last switched.ro TimeStamp (SNMPv2-TC) .1.3.6.1.4.1.9.9.387.1.7.8.1.17 |
cnfTopFlowsTOSType of service.ro Unsigned32 .1.3.6.1.4.1.9.9.387.1.7.8.1.18 |
cnfTopFlowsProtocolProtocol number.ro Unsigned32 .1.3.6.1.4.1.9.9.387.1.7.8.1.19 |
cnfTopFlowsTCPFlagsTCP flags.ro Unsigned32 .1.3.6.1.4.1.9.9.387.1.7.8.1.20 |
cnfTopFlowsSamplerIDNetflow Sampler ID.ro Unsigned32 .1.3.6.1.4.1.9.9.387.1.7.8.1.21 |
cnfTopFlowsClassIDNetflow Class ID.ro Unsigned32 .1.3.6.1.4.1.9.9.387.1.7.8.1.22 |
cnfTopFlowsFlagsFlow flags.ro Unsigned32 .1.3.6.1.4.1.9.9.387.1.7.8.1.23 |
cnfTopFlowsBytesNumber of bytes in the flow.ro Unsigned32 .1.3.6.1.4.1.9.9.387.1.7.8.1.24 |
cnfTopFlowsPacketsNumber of packets in the flow.ro Unsigned32 .1.3.6.1.4.1.9.9.387.1.7.8.1.25 |
cnfTopFlowsVlanThe VLAN-ID of this flow.ro VlanIndex (Q-BRIDGE-MIB) .1.3.6.1.4.1.9.9.387.1.7.8.1.26 |
cnfTopFlowsMatchSrcAddressTypeSource address type to match.
A value of 'unknown' (ie, 0) indicates the source address
is not used as a top flows match criteria, and clears the
cnfTopFlowsMatchSrcAddress and cnfTopFlowsMatchSrcAddressMask
configuration.rw InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.387.1.7.9 |
cnfTopFlowsMatchSrcAddressSource address prefix to match.rw InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.387.1.7.10 |
cnfTopFlowsMatchSrcAddressMaskThe length of the match source address prefix.
This prefix length must be consistent with the address type
specified in cnfTopFlowsMatchSrcAddressType. A length of zero
only matches the all-zero address of the specified type.rw InetAddressPrefixLength (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.387.1.7.11 |
cnfTopFlowsMatchDstAddressTypeDestination address type to match.
A value of 'unknown' (ie, 0) indicates the destination address
is not used as a top flows match criteria, and clears the
cnfTopFlowsMatchDstAddress and cnfTopFlowsMatchDstAddressMask
configuration.rw InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.387.1.7.12 |
cnfTopFlowsMatchDstAddressDestination address prefix to match.rw InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.387.1.7.13 |
cnfTopFlowsMatchDstAddressMaskThe length of the match destination address prefix.
This prefix length must be consistent with the address type
specified in cnfTopFlowsMatchDstAddressType. A length of zero
only matches the all-zero address of the specified type.rw InetAddressPrefixLength (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.387.1.7.14 |
cnfTopFlowsMatchNhAddressTypeNexthop address type to match.
A value of 'unknown' (ie, 0) indicates the nexthop address
is not used as a top flows match criteria, and clears the
cnfTopFlowsMatchNhAddress and cnfTopFlowsMatchNhAddressMask
configuration.rw InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.387.1.7.15 |
cnfTopFlowsMatchNhAddressNexthop address prefix to match.rw InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.387.1.7.16 |
cnfTopFlowsMatchNhAddressMaskThe length of the match nexthop address Prefix.
This prefix length must be consistent with the address type
specified in cnfTopFlowsMatchNhAddressType. A length of zero
only matches the all-zero address of the specified type.rw InetAddressPrefixLength (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.387.1.7.17 |
cnfTopFlowsMatchSrcPortLoThe minimum value that the layer-4 source port number in
the flow must have in order to match.
A value of -1 disables this match criteria.rw Integer32 (-1 | 0..65535) .1.3.6.1.4.1.9.9.387.1.7.18 |
cnfTopFlowsMatchSrcPortHiThe maximum value that the layer-4 source port number in
the flow must have in order to match.
A value of -1 disables this match criteria.rw Integer32 (-1 | 0..65535) .1.3.6.1.4.1.9.9.387.1.7.19 |
cnfTopFlowsMatchDstPortLoThe minimum value that the layer-4 destination port number in
the flow must have in order to match.
A value of -1 disables this match criteria.rw Integer32 (-1 | 0..65535) .1.3.6.1.4.1.9.9.387.1.7.20 |
cnfTopFlowsMatchDstPortHiThe maximum value that the layer-4 destination port number in
the flow must have in order to match.
A value of -1 disables this match criteria.rw Integer32 (-1 | 0..65535) .1.3.6.1.4.1.9.9.387.1.7.21 |
cnfTopFlowsMatchSrcASSource AS number to match.
A value of -1 disables this match criteria.rw Integer32 .1.3.6.1.4.1.9.9.387.1.7.22 |
cnfTopFlowsMatchDstASDestination AS number to match.
A value of -1 disables this match criteria.rw Integer32 .1.3.6.1.4.1.9.9.387.1.7.23 |
cnfTopFlowsMatchInputIfInput interface to match.
A value of 0 disables this match criteria.rw InterfaceIndexOrZero (IF-MIB) .1.3.6.1.4.1.9.9.387.1.7.24 |
cnfTopFlowsMatchOutputIfOutput interface to match.
A value of 0 disables this match criteria.rw InterfaceIndexOrZero (IF-MIB) .1.3.6.1.4.1.9.9.387.1.7.25 |
cnfTopFlowsMatchTOSByteTOS byte to match.
A value of -1 disables this match criteria.rw Integer32 .1.3.6.1.4.1.9.9.387.1.7.26 |
cnfTopFlowsMatchProtocolProtocol to match.
A value of -1 disables this match criteria.rw Integer32 .1.3.6.1.4.1.9.9.387.1.7.27 |
cnfTopFlowsMatchSamplerSampler name to match.
Leave blank to disable this match criteria.rw DisplayString (SNMPv2-TC) .1.3.6.1.4.1.9.9.387.1.7.28 |
cnfTopFlowsMatchClassClass name to match.
Leave blank to disable this match criteria.rw DisplayString (SNMPv2-TC) .1.3.6.1.4.1.9.9.387.1.7.29 |
cnfTopFlowsMatchMinPacketsMinimum packets to match.
A value of 0 disables this match criteria.rw Unsigned32 .1.3.6.1.4.1.9.9.387.1.7.30 |
cnfTopFlowsMatchMaxPacketsMaximum packets to match.
A value of 0 disables this match criteria.rw Unsigned32 .1.3.6.1.4.1.9.9.387.1.7.31 |
cnfTopFlowsMatchMinBytesMinimum bytes to match.
A value of 0 disables this match criteria.rw Unsigned32 .1.3.6.1.4.1.9.9.387.1.7.32 |
cnfTopFlowsMatchMaxBytesMaximum bytes to match.
A value of 0 disables this match criteria.rw Unsigned32 .1.3.6.1.4.1.9.9.387.1.7.33 |
cnfTopFlowsMatchDirectionFlow direction to match.
A value of 0 disables this match criteria.rw NfFlowDirectionTypes .1.3.6.1.4.1.9.9.387.1.7.34 |
cnfTopFlowsGenerateA control variable used to generate the Top Flows.
Setting this object to 'true' will generate the Top Flows
and populate the Top Flows report in cnfTopFlowsTable
unless cnfTopFlowsNextGenActionEffect is supported and the
value of cnfTopFlowsNextGenActionEffect is 'noOp'.
Setting this object to 'false' has no effect.
When read, this object always returns 'false'.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.387.1.7.35 |
cnfTopFlowsReportAvailableIndicates whether the Top Flows report has been
successfully generated and is available in
cnfTopFlowsTable.
When the value of this object is 'true', the
top flows report is available in cnfTopFlowsTable.
When the value of this object is 'false', there is no
top flows report available in cnfTopFlowsTable.
For Example:
1. When top flows report has not been generated or
is currently in the generation process.
2. When the top flows has been purged due to
the modification of a matching criteria or the
expiration of top flow cache timeout.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.387.1.7.36 |
cnfTopFlowsNextGenActionEffectIndicates the action effect on the system when the
cnfTopFlowsGenerate is set to 'true'.
'noOp'
when the cnfTopFlowsGenerate is set to 'true'.
Examples when this object could return 'noOp' are:
1. the system is still in the top flow generation
process.
2. the system will not generate the top flows
report when the value of
cnfTopFlowsReportAvailable is 'true'.
'generate'
flows generation process if the
cntTopFlowsGenerate is set to 'true'.
Examples when this object could return 'generate'
are:
1. When the value of cnfTopFlowsReportAvailable is
'false'.
2. The system will always generate the top flow
report when cnfTopFlowsGenerate is set to
'true'.ro Enumeration .1.3.6.1.4.1.9.9.387.1.7.37 |
cnfTopFlowsReportSourceIndicates the source of Top Flows report generation for
the entries populated in cnfTopFlowsTable.
'other' - The Top Flows are not available or the source
of the Top Flows cannot be identified.
'hardware' - The Top Flows report has been generated based
on the flows detected by the hardware platform
with netflow capabilities.
'software' - The Top Flows report has been generated based
on the flows detected by the software.
'both' - The Top Flows report is an integrated list of
Top Flows detected by both the hardware
platform and the software.ro Enumeration .1.3.6.1.4.1.9.9.387.1.7.38 |
ciscoNetflowMIBConform OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.387.2 |
cnfMIBCompliances OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.387.2.1 |
cnfMIBGroups OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.387.2.2 |