MIB Viewer

TUBS-IBR-LINUX-NETFILTER-MIB

52 objects
Experimental MIB module for the Linux 2.4 netfilter subsystem.
Imported Objects
OIDNameAccessStatusDescription
1.3.6.1.4.1.1575.1.13IdentitylnfMIBExperimental MIB module for the Linux 2.4 netfilter subsystem.
1.3.6.1.4.1.1575.1.13.1NodelnfObjects
1.3.6.1.4.1.1575.1.13.1.1ScalarlnfLastChangeread-onlycurrentThe time of the last netfilter configuration change of any kind, including any creation, deletion or modification of any table of this MIB.
1.3.6.1.4.1.1575.1.13.1.2TablelnfTableTablenot-accessiblecurrentA list of all tables installed on the netfilter subsystem.
1.3.6.1.4.1.1575.1.13.1.2.1RowlnfTableEntrynot-accessiblecurrentAn entry describing a particular netfilter table.
1.3.6.1.4.1.1575.1.13.1.2.1.1ColumnlnfTableAddressTypenot-accessiblecurrentThe address type for which the netfilter table works.
1.3.6.1.4.1.1575.1.13.1.2.1.2ColumnlnfTableNamenot-accessiblecurrentThe name of the netfilter table.
1.3.6.1.4.1.1575.1.13.1.2.1.3ColumnlnfTableLastChangeread-onlycurrentThe time of the last modification of this netfilter table, including the creation or deletion of a netfilter chain that belongs to this table.
1.3.6.1.4.1.1575.1.13.1.3TablelnfChainTablenot-accessiblecurrentA list of all chains installed on the netfilter subsystem.
1.3.6.1.4.1.1575.1.13.1.3.1RowlnfChainEntrynot-accessiblecurrentAn entry describing a particular netfilter chain.
1.3.6.1.4.1.1575.1.13.1.3.1.1ColumnlnfChainNamenot-accessiblecurrentThe netfilter chain to which the rule belongs.
1.3.6.1.4.1.1575.1.13.1.3.1.2ColumnlnfChainPacketsread-onlycurrentThe number of packets that passed this chain since the rule was installed or reset.
1.3.6.1.4.1.1575.1.13.1.3.1.3ColumnlnfChainOctetsread-onlycurrentThe number of octets that passed this chain since the chain was installed or reset.
1.3.6.1.4.1.1575.1.13.1.3.1.4ColumnlnfChainTargetread-createcurrentThe action that shall be applied to a packet if no rule within the chain matches. Note that user-defined chains only allow return(6).
1.3.6.1.4.1.1575.1.13.1.3.1.5ColumnlnfChainLastChangeread-onlycurrentThe time of the last modification of this netfilter chain, including the creation or deletion of a netfilter rule that belongs to this chain.
1.3.6.1.4.1.1575.1.13.1.3.1.6ColumnlnfChainStorageread-createcurrentThis object defines whether this row is kept in volatile storage and lost upon reboot or whether it is backed up by stable storage or builtin.
1.3.6.1.4.1.1575.1.13.1.3.1.7ColumnlnfChainStatusread-createcurrentThis object is used to create and delete rows in the lnfChainTable.
1.3.6.1.4.1.1575.1.13.1.4TablelnfRuleTablenot-accessiblecurrentA list of all rules installed on the netfilter subsystem.
1.3.6.1.4.1.1575.1.13.1.4.1RowlnfRuleEntrynot-accessiblecurrentAn entry describing a particular netfilter rule. Rules of different netfilter tables and chains are distinguished by the corresponding index objects.
1.3.6.1.4.1.1575.1.13.1.4.1.1ColumnlnfRuleIndexnot-accessiblecurrentA unique number identifying the rule within a netfilter chain.
1.3.6.1.4.1.1575.1.13.1.4.1.2ColumnlnfRuleProtocolread-createcurrentThe protocol of the rule. The number zero matches all protocols.
1.3.6.1.4.1.1575.1.13.1.4.1.3ColumnlnfRuleProtocolInvread-createcurrentThis flag specifies whether the lnfRuleProtocol test has to be inverted.
1.3.6.1.4.1.1575.1.13.1.4.1.4ColumnlnfRuleSourceAddressread-createcurrentThe source address of a packet. The exact format depends on the address type specified by lnfRuleAddressType. This test is applied for an address prefix whose …
1.3.6.1.4.1.1575.1.13.1.4.1.5ColumnlnfRuleSourceAddressPrefixLengthread-createcurrentThe network prefix length associated with lnfRuleSourceAddress.
1.3.6.1.4.1.1575.1.13.1.4.1.6ColumnlnfRuleSourceAddressInvread-createcurrentThis flag specifies whether the lnfRuleSourceAddress and lnfRuleSourceAddressPrefixLength test has to be inverted.
1.3.6.1.4.1.1575.1.13.1.4.1.7ColumnlnfRuleDestinationAddressread-createcurrentThe destination address of a packet. The exact format depends on the address type specified by lnfRuleAddressType. This test is applied for an address prefix w…
1.3.6.1.4.1.1575.1.13.1.4.1.8ColumnlnfRuleDestinationAddressPrefixLengthread-createcurrentThe network prefix length associated with lnfRuleDestinationAddress.
1.3.6.1.4.1.1575.1.13.1.4.1.9ColumnlnfRuleDestinationAddressInvread-createcurrentThis flag specifies whether the lnfRuleDestinationAddress and lnfRuleDestinationAddressPrefixLength test has to be inverted.
1.3.6.1.4.1.1575.1.13.1.4.1.10ColumnlnfRuleInInterfaceread-createcurrentName of an interface via which a packet is going to be received (only for packets entering the INPUT, FORWARD and PREROUTING chains). If the interface name end…
1.3.6.1.4.1.1575.1.13.1.4.1.11ColumnlnfRuleInInterfaceInvread-createcurrentThis flag specifies whether the lnfRuleInInterface test has to be inverted.
1.3.6.1.4.1.1575.1.13.1.4.1.12ColumnlnfRuleOutInterfaceread-createcurrentName of an interface via which a packet is going to be sent (for packets entering the FORWARD, OUTPUT and POSTROUTING chains). If the interface name ends in a …
1.3.6.1.4.1.1575.1.13.1.4.1.13ColumnlnfRuleOutInterfaceInvread-createcurrentThis flag specifies whether the lnfRuleOutInterface test has to be inverted.
1.3.6.1.4.1.1575.1.13.1.4.1.14ColumnlnfRuleFragmentread-createcurrentIf this flag is true, the rule only refers to second and further fragments of fragmented packets. Since there is no way to tell the source or destination ports…
1.3.6.1.4.1.1575.1.13.1.4.1.15ColumnlnfRuleFragmentInvread-createcurrentThis flag specifies whether the lnfRuleFragmentInv test, if true, has to be inverted. An inverted rule will only match head fragments, or unfragmented packets.
1.3.6.1.4.1.1575.1.13.1.4.1.16ColumnlnfRulePacketsread-onlycurrentThe number of packets that matched this rule since the rule was installed or reset.
1.3.6.1.4.1.1575.1.13.1.4.1.17ColumnlnfRuleOctetsread-onlycurrentThe number of octets that matched this rule since the rule was installed or reset.
1.3.6.1.4.1.1575.1.13.1.4.1.18ColumnlnfRuleTargetread-createcurrentThe action that shall be applied to a packet if the rule matches. If the value is chain(7), then jump to the user chain specified by lnfRuleTargetChain.
1.3.6.1.4.1.1575.1.13.1.4.1.19ColumnlnfRuleTargetChainread-createcurrentThe name of the target chain if the value of lnfRuleTarget is chain(7).
1.3.6.1.4.1.1575.1.13.1.4.1.20ColumnlnfRuleTrapEnableread-writecurrentIndicates whether lnfRuleMatch traps should be generated for packets matching this rule. Note that it's up to the implementation to delay and accumulate mutlip…
1.3.6.1.4.1.1575.1.13.1.4.1.21ColumnlnfRuleLastChangeread-onlycurrentThe time of the last modification of this netfilter rule. If it has been unchanged since the last re-initialization of the local network management subsystem, …
1.3.6.1.4.1.1575.1.13.1.4.1.22ColumnlnfRuleStorageread-createcurrentThis object defines whether this row is kept in volatile storage and lost upon reboot or whether it is backed up by stable storage or builtin.
1.3.6.1.4.1.1575.1.13.1.4.1.23ColumnlnfRuleStatusread-createcurrentThis object is used to create and delete rows in the lnfRuleTable.
1.3.6.1.4.1.1575.1.13.2NodelnfTraps
1.3.6.1.4.1.1575.1.13.2.0NodelnfNotifications
1.3.6.1.4.1.1575.1.13.2.0.1NotificationlnfRuleMatchcurrentA lnfRuleMatch trap signifies that the rule to which the lnfRulePackets and lnfRuleOctets objects belong was matched by at least one packets since the last tra…
1.3.6.1.4.1.1575.1.13.3NodelnfConformance
1.3.6.1.4.1.1575.1.13.3.1NodelnfCompliances
1.3.6.1.4.1.1575.1.13.3.1.1CompliancelnfCompliancecurrentThe compliance statement for an SNMP entity which implements the Linux Netfilter MIB.
1.3.6.1.4.1.1575.1.13.3.2NodelnfGroups
1.3.6.1.4.1.1575.1.13.3.2.1GrouplnfGeneralGroupcurrentA collection of all Linux Netfilter objects of the core table.
1.3.6.1.4.1.1575.1.13.3.2.2GrouplnfNotificationGroupcurrentA collection of all Linux Netfilter notifications.
Type Definitions
NameSyntaxStatusDescription
LnfTargetINTEGER { none(1), other(2), drop(3), accept(4), queue(5), return(6), chain(7) }currentThis data type represents an action that is about to be applied to a packet. none(1): No action, except increasing counters. other(2): An unknown extension action which cannot be described by the values specified below.…