TUBS-IBR-LINUX-NETFILTER-MIB: View SNMP OID List / Download MIB
VENDOR: TU BRAUNSCHWEIG
| Home | MIB: TUBS-IBR-LINUX-NETFILTER-MIB | |||
|---|---|---|---|---|
| Download as: |
Download standard MIB format if you are planning to load a MIB file into some system (OS, Zabbix, PRTG ...) or view it with a MIB browser. CSV is more suitable for analyzing and viewing OID' and other MIB objects in excel. JSON and YAML formats are usually used in programing even though some systems can use MIB in YAML format (like Logstash).
|
|||
| Object Name | OID | Type | Access | Info |
| lnfMIB | 1.3.6.1.4.1.1575.1.13 |
Experimental MIB module for the Linux 2.4 netfilter subsystem. |
||
| lnfObjects | 1.3.6.1.4.1.1575.1.13.1 | |||
| lnfLastChange | 1.3.6.1.4.1.1575.1.13.1.1 | timestamp | read-only |
The time of the last netfilter configuration change of any kind, including any creation, deletion or modification of any table of this MIB. |
| lnfTableTable | 1.3.6.1.4.1.1575.1.13.1.2 | no-access |
A list of all tables installed on the netfilter subsystem. |
|
| 1.3.6.1.4.1.1575.1.13.1.2.1 | no-access |
An entry describing a particular netfilter table. |
||
| lnfTableAddressType | 1.3.6.1.4.1.1575.1.13.1.2.1.1 | inetaddresstype | no-access |
The address type for which the netfilter table works. Enumeration: 'ipv4': 1, 'ipv6': 2. |
| lnfTableName | 1.3.6.1.4.1.1575.1.13.1.2.1.2 | snmpadminstring | no-access |
The name of the netfilter table. |
| lnfTableLastChange | 1.3.6.1.4.1.1575.1.13.1.2.1.3 | timestamp | read-only |
The time of the last modification of this netfilter table, including the creation or deletion of a netfilter chain that belongs to this table. |
| lnfChainTable | 1.3.6.1.4.1.1575.1.13.1.3 | no-access |
A list of all chains installed on the netfilter subsystem. |
|
| 1.3.6.1.4.1.1575.1.13.1.3.1 | no-access |
An entry describing a particular netfilter chain. |
||
| lnfChainName | 1.3.6.1.4.1.1575.1.13.1.3.1.1 | snmpadminstring | no-access |
The netfilter chain to which the rule belongs. |
| lnfChainPackets | 1.3.6.1.4.1.1575.1.13.1.3.1.2 | counter64 | read-only |
The number of packets that passed this chain since the rule was installed or reset. |
| lnfChainOctets | 1.3.6.1.4.1.1575.1.13.1.3.1.3 | counter64 | read-only |
The number of octets that passed this chain since the chain was installed or reset. |
| lnfChainTarget | 1.3.6.1.4.1.1575.1.13.1.3.1.4 | lnftarget | read-only |
The action that shall be applied to a packet if no rule within the chain matches. Note that user-defined chains only allow return(6). Enumeration: 'drop': 3, 'return': 6, 'accept': 4. |
| lnfChainLastChange | 1.3.6.1.4.1.1575.1.13.1.3.1.5 | timestamp | read-only |
The time of the last modification of this netfilter chain, including the creation or deletion of a netfilter rule that belongs to this chain. |
| lnfChainStorage | 1.3.6.1.4.1.1575.1.13.1.3.1.6 | storagetype | read-only |
This object defines whether this row is kept in volatile storage and lost upon reboot or whether it is backed up by stable storage or builtin. |
| lnfChainStatus | 1.3.6.1.4.1.1575.1.13.1.3.1.7 | rowstatus | read-only |
This object is used to create and delete rows in the lnfChainTable. |
| lnfRuleTable | 1.3.6.1.4.1.1575.1.13.1.4 | no-access |
A list of all rules installed on the netfilter subsystem. |
|
| 1.3.6.1.4.1.1575.1.13.1.4.1 | no-access |
An entry describing a particular netfilter rule. Rules of different netfilter tables and chains are distinguished by the corresponding index objects. |
||
| lnfRuleIndex | 1.3.6.1.4.1.1575.1.13.1.4.1.1 | unsigned32 | no-access |
A unique number identifying the rule within a netfilter chain. |
| lnfRuleProtocol | 1.3.6.1.4.1.1575.1.13.1.4.1.2 | unsigned32 | read-only |
The protocol of the rule. The number zero matches all protocols. |
| lnfRuleProtocolInv | 1.3.6.1.4.1.1575.1.13.1.4.1.3 | truthvalue | read-only |
This flag specifies whether the lnfRuleProtocol test has to be inverted. |
| lnfRuleSourceAddress | 1.3.6.1.4.1.1575.1.13.1.4.1.4 | inetaddress | read-only |
The source address of a packet. The exact format depends on the address type specified by lnfRuleAddressType. This test is applied for an address prefix whose length is specified by lnfRuleSourceAddressPrefixLength. If a new row is created this object should default to an all-zeros value with a length approrpiate for the corresponding lnfRuleAddressType object value. |
| lnfRuleSourceAddressPrefixLength | 1.3.6.1.4.1.1575.1.13.1.4.1.5 | inetaddressprefixlength | read-only |
The network prefix length associated with lnfRuleSourceAddress. |
| lnfRuleSourceAddressInv | 1.3.6.1.4.1.1575.1.13.1.4.1.6 | truthvalue | read-only |
This flag specifies whether the lnfRuleSourceAddress and lnfRuleSourceAddressPrefixLength test has to be inverted. |
| lnfRuleDestinationAddress | 1.3.6.1.4.1.1575.1.13.1.4.1.7 | inetaddress | read-only |
The destination address of a packet. The exact format depends on the address type specified by lnfRuleAddressType. This test is applied for an address prefix whose length is specified by lnfRuleDestinationAddressPrefixLength. If a new row is created this object should default to an all-zeros value with a length approrpiate for the corresponding lnfRuleAddressType object value. |
| lnfRuleDestinationAddressPrefixLength | 1.3.6.1.4.1.1575.1.13.1.4.1.8 | inetaddressprefixlength | read-only |
The network prefix length associated with lnfRuleDestinationAddress. |
| lnfRuleDestinationAddressInv | 1.3.6.1.4.1.1575.1.13.1.4.1.9 | truthvalue | read-only |
This flag specifies whether the lnfRuleDestinationAddress and lnfRuleDestinationAddressPrefixLength test has to be inverted. |
| lnfRuleInInterface | 1.3.6.1.4.1.1575.1.13.1.4.1.10 | snmpadminstring | read-only |
Name of an interface via which a packet is going to be received (only for packets entering the INPUT, FORWARD and PREROUTING chains). If the interface name ends in a '+', then any interface which begins with this name will match. If this is an empty string, any interface name will match. |
| lnfRuleInInterfaceInv | 1.3.6.1.4.1.1575.1.13.1.4.1.11 | truthvalue | read-only |
This flag specifies whether the lnfRuleInInterface test has to be inverted. |
| lnfRuleOutInterface | 1.3.6.1.4.1.1575.1.13.1.4.1.12 | snmpadminstring | read-only |
Name of an interface via which a packet is going to be sent (for packets entering the FORWARD, OUTPUT and POSTROUTING chains). If the interface name ends in a '+', then any interface which begins with this name will match. If this is an empty string, any interface name will match. |
| lnfRuleOutInterfaceInv | 1.3.6.1.4.1.1575.1.13.1.4.1.13 | truthvalue | read-only |
This flag specifies whether the lnfRuleOutInterface test has to be inverted. |
| lnfRuleFragment | 1.3.6.1.4.1.1575.1.13.1.4.1.14 | truthvalue | read-only |
If this flag is true, the rule only refers to second and further fragments of fragmented packets. Since there is no way to tell the source or destination ports of such a packet (or ICMP type), such a packet will not match any rules which specify them. |
| lnfRuleFragmentInv | 1.3.6.1.4.1.1575.1.13.1.4.1.15 | truthvalue | read-only |
This flag specifies whether the lnfRuleFragmentInv test, if true, has to be inverted. An inverted rule will only match head fragments, or unfragmented packets. |
| lnfRulePackets | 1.3.6.1.4.1.1575.1.13.1.4.1.16 | counter64 | read-only |
The number of packets that matched this rule since the rule was installed or reset. |
| lnfRuleOctets | 1.3.6.1.4.1.1575.1.13.1.4.1.17 | counter64 | read-only |
The number of octets that matched this rule since the rule was installed or reset. |
| lnfRuleTarget | 1.3.6.1.4.1.1575.1.13.1.4.1.18 | lnftarget | read-only |
The action that shall be applied to a packet if the rule matches. If the value is chain(7), then jump to the user chain specified by lnfRuleTargetChain. |
| lnfRuleTargetChain | 1.3.6.1.4.1.1575.1.13.1.4.1.19 | snmpadminstring | read-only |
The name of the target chain if the value of lnfRuleTarget is chain(7). |
| lnfRuleTrapEnable | 1.3.6.1.4.1.1575.1.13.1.4.1.20 | truthvalue | read-write |
Indicates whether lnfRuleMatch traps should be generated for packets matching this rule. Note that it's up to the implementation to delay and accumulate mutliple traps in order to reduce the number of emitted traps. |
| lnfRuleLastChange | 1.3.6.1.4.1.1575.1.13.1.4.1.21 | timestamp | read-only |
The time of the last modification of this netfilter rule. If it has been unchanged since the last re-initialization of the local network management subsystem, then this object contains a zero value. |
| lnfRuleStorage | 1.3.6.1.4.1.1575.1.13.1.4.1.22 | storagetype | read-only |
This object defines whether this row is kept in volatile storage and lost upon reboot or whether it is backed up by stable storage or builtin. |
| lnfRuleStatus | 1.3.6.1.4.1.1575.1.13.1.4.1.23 | rowstatus | read-only |
This object is used to create and delete rows in the lnfRuleTable. |
| lnfTraps | 1.3.6.1.4.1.1575.1.13.2 | |||
| lnfNotifications | 1.3.6.1.4.1.1575.1.13.2.0 | |||
| lnfRuleMatch | 1.3.6.1.4.1.1575.1.13.2.0.1 |
A lnfRuleMatch trap signifies that the rule to which the lnfRulePackets and lnfRuleOctets objects belong was matched by at least one packets since the last trap for the same rule was emitted. The agent may delay and accumulate mutliple traps in order to reduce the number of emitted traps, but the time for accumulation should be no more than 60 seconds. Note that detailed information on the packet(s) that triggered a trap is not available from the trap's objects. This would cause problems with the accumulation of matches and/or increased trap traffic. |
||
| lnfConformance | 1.3.6.1.4.1.1575.1.13.3 | |||
| lnfCompliances | 1.3.6.1.4.1.1575.1.13.3.1 | |||
| lnfCompliance | 1.3.6.1.4.1.1575.1.13.3.1.1 |
The compliance statement for an SNMP entity which implements the Linux Netfilter MIB. |
||
| lnfGroups | 1.3.6.1.4.1.1575.1.13.3.2 | |||
| lnfGeneralGroup | 1.3.6.1.4.1.1575.1.13.3.2.1 |
A collection of all Linux Netfilter objects of the core table. |
||
| lnfNotificationGroup | 1.3.6.1.4.1.1575.1.13.3.2.2 |
A collection of all Linux Netfilter notifications. |
||