TUBS-IBR-LINUX-NETFILTER-MIB
AI MIB Summary
The TUBS-IBR-LINUX-NETFILTER-MIB module provides SNMP access to monitor Linux 2.4 netfilter subsystem counters, including packet and byte statistics for defined filter rules, connection tracking states, and dropped packet metrics. It enables the collection of firewall throughput and session data specifically for legacy Linux kernels utilizing the 2.4 netfilter architecture.
Experimental MIB module for the Linux 2.4 netfilter subsystem.
Main OID:
lnfMIB.1.3.6.1.4.1.1575.1.13
51
Objects
Active
Status
6
Dependencies
Imported Objects
Objects
51 total| Object Name |
|---|
lnfMIBExperimental MIB module for the Linux 2.4 netfilter subsystem. MODULE-IDENTITY .1.3.6.1.4.1.1575.1.13 |
lnfObjects OBJECT IDENTIFIER .1.3.6.1.4.1.1575.1.13.1 |
lnfLastChangeThe time of the last netfilter configuration change of any kind, including any creation, deletion or modification of any table of this MIB.ro TimeStamp (SNMPv2-TC) .1.3.6.1.4.1.1575.1.13.1.1 |
lnfTableTableA list of all tables installed on the netfilter subsystem. SEQUENCE OF LnfTableEntry .1.3.6.1.4.1.1575.1.13.1.2 |
lnfTableEntryAn entry describing a particular netfilter table. LnfTableEntry .1.3.6.1.4.1.1575.1.13.1.2.1 |
lnfTableAddressTypeThe address type for which the netfilter table works. InetAddressType { ipv4(1), ipv6(2) } .1.3.6.1.4.1.1575.1.13.1.2.1.1 |
lnfTableNameThe name of the netfilter table. SnmpAdminString .1.3.6.1.4.1.1575.1.13.1.2.1.2 |
lnfTableLastChangeThe time of the last modification of this netfilter table, including the creation or deletion of a netfilter chain that belongs to this table.ro TimeStamp (SNMPv2-TC) .1.3.6.1.4.1.1575.1.13.1.2.1.3 |
lnfChainTableA list of all chains installed on the netfilter subsystem. SEQUENCE OF LnfChainEntry .1.3.6.1.4.1.1575.1.13.1.3 |
lnfChainEntryAn entry describing a particular netfilter chain. LnfChainEntry .1.3.6.1.4.1.1575.1.13.1.3.1 |
lnfChainNameThe netfilter chain to which the rule belongs. SnmpAdminString .1.3.6.1.4.1.1575.1.13.1.3.1.1 |
lnfChainPacketsThe number of packets that passed this chain since the rule was installed or reset.ro Counter64 .1.3.6.1.4.1.1575.1.13.1.3.1.2 |
lnfChainOctetsThe number of octets that passed this chain since the chain was installed or reset.ro Counter64 .1.3.6.1.4.1.1575.1.13.1.3.1.3 |
lnfChainTargetThe action that shall be applied to a packet if no rule within the chain matches. Note that user-defined chains only allow return(6).rw LnfTarget { drop(3), accept(4), return(6) } .1.3.6.1.4.1.1575.1.13.1.3.1.4 |
lnfChainLastChangeThe time of the last modification of this netfilter chain, including the creation or deletion of a netfilter rule that belongs to this chain.ro TimeStamp (SNMPv2-TC) .1.3.6.1.4.1.1575.1.13.1.3.1.5 |
lnfChainStorageThis object defines whether this row is kept in volatile storage and lost upon reboot or whether it is backed up by stable storage or builtin.rw StorageType (SNMPv2-TC) .1.3.6.1.4.1.1575.1.13.1.3.1.6 |
lnfChainStatusThis object is used to create and delete rows in the lnfChainTable.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.1575.1.13.1.3.1.7 |
lnfRuleTableA list of all rules installed on the netfilter subsystem. SEQUENCE OF LnfRuleEntry .1.3.6.1.4.1.1575.1.13.1.4 |
lnfRuleEntryAn entry describing a particular netfilter rule. Rules of different netfilter tables and chains are distinguished by the corresponding index objects. LnfRuleEntry .1.3.6.1.4.1.1575.1.13.1.4.1 |
lnfRuleIndexA unique number identifying the rule within a netfilter chain. Unsigned32 .1.3.6.1.4.1.1575.1.13.1.4.1.1 |
lnfRuleProtocolThe protocol of the rule. The number zero matches all protocols.rw Unsigned32 .1.3.6.1.4.1.1575.1.13.1.4.1.2 |
lnfRuleProtocolInvThis flag specifies whether the lnfRuleProtocol test has to be inverted.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.1575.1.13.1.4.1.3 |
lnfRuleSourceAddressThe source address of a packet. The exact format depends on the address type specified by lnfRuleAddressType. This test is applied for an address prefix whose length is specified by lnfRuleSourceAddressPrefixLength. If a new row is created this object should default to an all-zeros value with a length approrpiate for the corresponding lnfRuleAddressType object value.rw InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.1575.1.13.1.4.1.4 |
lnfRuleSourceAddressPrefixLengthThe network prefix length associated with lnfRuleSourceAddress.rw InetAddressPrefixLength (INET-ADDRESS-MIB) .1.3.6.1.4.1.1575.1.13.1.4.1.5 |
lnfRuleSourceAddressInvThis flag specifies whether the lnfRuleSourceAddress and lnfRuleSourceAddressPrefixLength test has to be inverted.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.1575.1.13.1.4.1.6 |
lnfRuleDestinationAddressThe destination address of a packet. The exact format depends on the address type specified by lnfRuleAddressType. This test is applied for an address prefix whose length is specified by lnfRuleDestinationAddressPrefixLength. If a new row is created this object should default to an all-zeros value with a length approrpiate for the corresponding lnfRuleAddressType object value.rw InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.1575.1.13.1.4.1.7 |
lnfRuleDestinationAddressPrefixLengthThe network prefix length associated with lnfRuleDestinationAddress.rw InetAddressPrefixLength (INET-ADDRESS-MIB) .1.3.6.1.4.1.1575.1.13.1.4.1.8 |
lnfRuleDestinationAddressInvThis flag specifies whether the lnfRuleDestinationAddress and lnfRuleDestinationAddressPrefixLength test has to be inverted.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.1575.1.13.1.4.1.9 |
lnfRuleInInterfaceName of an interface via which a packet is going to be received (only for packets entering the INPUT, FORWARD and PREROUTING chains). If the interface name ends in a '+', then any interface which begins with this name will match. If this is an empty string, any interface name will match.rw SnmpAdminString .1.3.6.1.4.1.1575.1.13.1.4.1.10 |
lnfRuleInInterfaceInvThis flag specifies whether the lnfRuleInInterface test has to be inverted.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.1575.1.13.1.4.1.11 |
lnfRuleOutInterfaceName of an interface via which a packet is going to be sent (for packets entering the FORWARD, OUTPUT and POSTROUTING chains). If the interface name ends in a '+', then any interface which begins with this name will match. If this is an empty string, any interface name will match.rw SnmpAdminString .1.3.6.1.4.1.1575.1.13.1.4.1.12 |
lnfRuleOutInterfaceInvThis flag specifies whether the lnfRuleOutInterface test has to be inverted.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.1575.1.13.1.4.1.13 |
lnfRuleFragmentIf this flag is true, the rule only refers to second and further fragments of fragmented packets. Since there is no way to tell the source or destination ports of such a packet (or ICMP type), such a packet will not match any rules which specify them.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.1575.1.13.1.4.1.14 |
lnfRuleFragmentInvThis flag specifies whether the lnfRuleFragmentInv test, if true, has to be inverted. An inverted rule will only match head fragments, or unfragmented packets.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.1575.1.13.1.4.1.15 |
lnfRulePacketsThe number of packets that matched this rule since the rule was installed or reset.ro Counter64 .1.3.6.1.4.1.1575.1.13.1.4.1.16 |
lnfRuleOctetsThe number of octets that matched this rule since the rule was installed or reset.ro Counter64 .1.3.6.1.4.1.1575.1.13.1.4.1.17 |
lnfRuleTargetThe action that shall be applied to a packet if the rule matches. If the value is chain(7), then jump to the user chain specified by lnfRuleTargetChain.rw LnfTarget .1.3.6.1.4.1.1575.1.13.1.4.1.18 |
lnfRuleTargetChainThe name of the target chain if the value of lnfRuleTarget is chain(7).rw SnmpAdminString .1.3.6.1.4.1.1575.1.13.1.4.1.19 |
lnfRuleTrapEnableIndicates whether lnfRuleMatch traps should be generated for packets matching this rule. Note that it's up to the implementation to delay and accumulate mutliple traps in order to reduce the number of emitted traps.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.1575.1.13.1.4.1.20 |
lnfRuleLastChangeThe time of the last modification of this netfilter rule. If it has been unchanged since the last re-initialization of the local network management subsystem, then this object contains a zero value.ro TimeStamp (SNMPv2-TC) .1.3.6.1.4.1.1575.1.13.1.4.1.21 |
lnfRuleStorageThis object defines whether this row is kept in volatile storage and lost upon reboot or whether it is backed up by stable storage or builtin.rw StorageType (SNMPv2-TC) .1.3.6.1.4.1.1575.1.13.1.4.1.22 |
lnfRuleStatusThis object is used to create and delete rows in the lnfRuleTable.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.1575.1.13.1.4.1.23 |
lnfTraps OBJECT IDENTIFIER .1.3.6.1.4.1.1575.1.13.2 |
lnfNotifications OBJECT IDENTIFIER .1.3.6.1.4.1.1575.1.13.2.0 |
lnfRuleMatchA lnfRuleMatch trap signifies that the rule to which the lnfRulePackets and lnfRuleOctets objects belong was matched by at least one packets since the last trap for the same rule was emitted. The agent may delay and accumulate mutliple traps in order to reduce the number of emitted traps, but the time for accumulation should be no more than 60 seconds. Note that detailed information on the packet(s) that triggered a trap is not available from the trap's objects. This would cause problems with the accumulation of matches and/or increased trap traffic. NOTIFICATION-TYPE .1.3.6.1.4.1.1575.1.13.2.0.1 |
lnfConformance OBJECT IDENTIFIER .1.3.6.1.4.1.1575.1.13.3 |
lnfCompliances OBJECT IDENTIFIER .1.3.6.1.4.1.1575.1.13.3.1 |
lnfComplianceThe compliance statement for an SNMP entity which implements the Linux Netfilter MIB. Unknown .1.3.6.1.4.1.1575.1.13.3.1.1 |
lnfGroups OBJECT IDENTIFIER .1.3.6.1.4.1.1575.1.13.3.2 |
lnfGeneralGroupA collection of all Linux Netfilter objects of the core table. Unknown .1.3.6.1.4.1.1575.1.13.3.2.1 |
lnfNotificationGroupA collection of all Linux Netfilter notifications. Unknown .1.3.6.1.4.1.1575.1.13.3.2.2 |