UCD-IPFWACC-MIB DEFINITIONS ::= BEGIN
IMPORTS
OBJECT-TYPE, MODULE-IDENTITY, IpAddress, Integer32, Counter32
FROM SNMPv2-SMI
DisplayString
FROM SNMPv2-TC
ucdExperimental
FROM UCD-SNMP-MIB;
ucdIpFwAccMIB MODULE-IDENTITY
LAST-UPDATED "9912160000Z"
ORGANIZATION "University of California, Davis"
CONTACT-INFO
"This mib is no longer being maintained by the University of
California and is now in life-support-mode and being
maintained by the net-snmp project. The best place to write
for public questions about the net-snmp-coders mailing list
at net-snmp-coders@lists.sourceforge.net.
postal: Wes Hardaker
P.O. Box 382
Davis CA 95617
email: net-snmp-coders@lists.sourceforge.net
"
DESCRIPTION
"This module defines MIB components for reading information
from the accounting rules IP Firewall. This would typically
let you read the rules and the counters. I did not include
some flags and fields that I considered irrelevant for the
accounting rules. Resetting the counters of the rules by SNMP
would be simple, but I don't consider it so useful. I gave no
consideration to implementing write access for allowing
modification of the accounting rules.
Cristian.Estan@net.utcluj.ro "
REVISION "9912160000Z"
DESCRIPTION
"SMIv2 version converted from an older MIB definition."
::= { ucdExperimental 1 }
ipFwAccTable OBJECT-TYPE
SYNTAX SEQUENCE OF IpFwAccEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"A table with the accounting rules of the IP firewall"
::= { ucdIpFwAccMIB 1 }
ipFwAccEntry OBJECT-TYPE
SYNTAX IpFwAccEntry
MAX-ACCESS not-accessible
STATUS current
DESCRIPTION
"An accounting rule of the IP firewall"
INDEX { ipFwAccIndex }
::= { ipFwAccTable 1 }
IpFwAccEntry ::= SEQUENCE {
ipFwAccIndex Integer32,
ipFwAccSrcAddr IpAddress,
ipFwAccSrcNetMask IpAddress,
ipFwAccDstAddr IpAddress,
ipFwAccDstNetMask IpAddress,
ipFwAccViaName DisplayString,
ipFwAccViaAddr IpAddress,
ipFwAccProto INTEGER,
ipFwAccBidir INTEGER,
ipFwAccDir INTEGER,
ipFwAccBytes Counter32,
ipFwAccPackets Counter32,
ipFwAccNrSrcPorts Integer32,
ipFwAccNrDstPorts Integer32,
ipFwAccSrcIsRange INTEGER,
ipFwAccDstIsRange INTEGER,
ipFwAccPort1 Integer32,
ipFwAccPort2 Integer32,
ipFwAccPort3 Integer32,
ipFwAccPort4 Integer32,
ipFwAccPort5 Integer32,
ipFwAccPort6 Integer32,
ipFwAccPort7 Integer32,
ipFwAccPort8 Integer32,
ipFwAccPort9 Integer32,
ipFwAccPort10 Integer32
}
ipFwAccIndex OBJECT-TYPE
SYNTAX Integer32 (0..2147483647)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Reference index for each firewall rule."
::= { ipFwAccEntry 1 }
ipFwAccSrcAddr OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The source address in the firewall rule."
::= { ipFwAccEntry 2 }
ipFwAccSrcNetMask OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The netmask of the source address in the firewall rule."
::= { ipFwAccEntry 3 }
ipFwAccDstAddr OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The destination address in the firewall rule."
::= { ipFwAccEntry 4 }
ipFwAccDstNetMask OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The netmask of the destination address in the firewall rule."
::= { ipFwAccEntry 5 }
ipFwAccViaName OBJECT-TYPE
SYNTAX DisplayString (SIZE(1..64))
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The name of the interface to which the rule applies. If no
interface is associated with the present rule, this should
contain a dash (-)."
::= { ipFwAccEntry 6 }
ipFwAccViaAddr OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The address of the interface to which the rule applies.
Using this parameter makes sense when multiple addresses are
associated to the same physical interface. If not defined
for the current rule this should be set to 0."
::= { ipFwAccEntry 7 }
ipFwAccProto OBJECT-TYPE
SYNTAX INTEGER {
other(1),
all(2),
tcp(3),
udp(4),
icmp(5)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The protocol(s) to which the rule applies."
::= { ipFwAccEntry 8 }
ipFwAccBidir OBJECT-TYPE
SYNTAX INTEGER {
unidirectional(1),
bidirectional(2)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Whether the rule works in both directions (i.e. with the
source and destination parts swapped) or not."
::= { ipFwAccEntry 9 }
ipFwAccDir OBJECT-TYPE
SYNTAX INTEGER {
both(1),
in(2),
out(3)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Whether the rule applies to packets entering or exiting the
kernel."
::= { ipFwAccEntry 10 }
ipFwAccBytes OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of bytes that matched this rule since the last
reset of the counters."
::= { ipFwAccEntry 11 }
ipFwAccPackets OBJECT-TYPE
SYNTAX Counter32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of packets that matched this rule since the last
reset of the counters."
::= { ipFwAccEntry 12 }
ipFwAccNrSrcPorts OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of ports that refer to the source address."
::= { ipFwAccEntry 13 }
ipFwAccNrDstPorts OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"The number of ports that refer to the destination address."
::= { ipFwAccEntry 14 }
ipFwAccSrcIsRange OBJECT-TYPE
SYNTAX INTEGER {
srchasrange(1),
srchasnorange(2)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Interpret the first two ports of the source part as
the upper and lower limit of an interval or not."
::= { ipFwAccEntry 15 }
ipFwAccDstIsRange OBJECT-TYPE
SYNTAX INTEGER {
dsthasrange(1),
dsthasnorange(2)
}
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Interpret the first two ports of the destination part as
the upper and lower limit of an interval or not."
::= { ipFwAccEntry 16 }
ipFwAccPort1 OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Port number 1."
::= { ipFwAccEntry 17 }
ipFwAccPort2 OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Port number 2."
::= { ipFwAccEntry 18 }
ipFwAccPort3 OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Port number 3."
::= { ipFwAccEntry 19 }
ipFwAccPort4 OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Port number 4."
::= { ipFwAccEntry 20 }
ipFwAccPort5 OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Port number 5."
::= { ipFwAccEntry 21 }
ipFwAccPort6 OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Port number 6."
::= { ipFwAccEntry 22 }
ipFwAccPort7 OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Port number 7."
::= { ipFwAccEntry 23 }
ipFwAccPort8 OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Port number 8."
::= { ipFwAccEntry 24 }
ipFwAccPort9 OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Port number 9."
::= { ipFwAccEntry 25 }
ipFwAccPort10 OBJECT-TYPE
SYNTAX Integer32
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Port number 10."
::= { ipFwAccEntry 26 }
END
|