NETFLOW-MIB
File:
NETFLOW-MIB.mib (22455 bytes)
Imported modules
Imported symbols
Defined Types
NetflowInterfaceDirectionTypes |
|
Defines different direction types of interface netflow configuration. |
TEXTUAL-CONVENTION |
|
|
|
|
INTEGER |
interfaceDirNone(0), interfaceDirIngress(1), interfaceDirEgress(2), interfaceDirBoth(3) |
|
NetflowAggregationtypes |
|
Defines different aggregation types of netflow cache. |
TEXTUAL-CONVENTION |
|
|
|
|
INTEGER |
main(0), as(1), protocolPort(2), sourcePrefix(3), destinationPrefix(4), prefix(5), asTos(6), protocolPortTos(7), sourcePrefixTos(8), destinationPrefixTos(9), prefixTos(10), prefixPort(11), bgpNexthopTos(12) |
|
NetflowVersionType |
|
Defines different types of Version. |
TEXTUAL-CONVENTION |
|
|
|
|
INTEGER |
version1(1), version5(5), version9(9) |
|
NetflowTemplateTypes |
|
Defines different types of Template. |
TEXTUAL-CONVENTION |
|
|
|
|
INTEGER |
template(1), optionTemplate(2) |
|
NetflowCacheEntry |
|
SEQUENCE |
|
|
|
|
netflowCacheType |
NetflowAggregationtypes |
|
|
netflowCacheEnable |
TruthValue |
|
|
netflowCacheEntries |
Unsigned32 |
|
|
netflowUsedEntries |
Unsigned32 |
|
|
netflowUnUsedEntries |
Unsigned32 |
|
|
netflowActiveTimeOut |
Unsigned32 |
|
|
netflowInactiveTimeOut |
Unsigned32 |
|
NetflowCollectorEntry |
|
SEQUENCE |
|
|
|
|
netflowCollectorAddressType |
InetAddressType |
|
|
netflowCollectorAddress |
InetAddress |
|
|
netflowCollectorPort |
InetPortNumber |
|
|
netflowCollectorStatus |
RowStatus |
|
NetflowTemplateEntry |
|
SEQUENCE |
|
|
|
|
netflowTemplateType |
NetflowTemplateTypes |
|
|
netflowTemplateAdded |
Unsigned32 |
|
|
netflowTemplateActive |
Unsigned32 |
|
|
netflowTemplateAgerPolls |
Unsigned32 |
|
NetflowTemplateExportInfoEntry |
|
SEQUENCE |
|
|
|
|
netflowTemplateExportVer9Enable |
TruthValue |
|
|
netflowTemplateExportVer9TplTimeout |
Unsigned32 |
|
|
netflowTemplateExportVer9OptTimeout |
Unsigned32 |
|
|
netflowTemplateExportVer9TplRefreshRate |
Unsigned32 |
|
|
netflowTemplateExportVer9OptRefreshRate |
Unsigned32 |
|
Defined Values
netflowMIB |
1.3.6.1.4.1.3320.9.226 |
The Netflow MIB provides a simple and easy method
to get NetFlow cache information, current NetFlow
configuration and statistics. It will enable medium to
small size enterprises to take advantage of NetFlow
technology over SNMP at a reduced infrastructure cost.
The MIB is created to provide Netflow information in
these areas:
1. Cache information and configuration.
2. Collector information and configuration.
3. Export Statistics.
4. Version 9 Export Template information.
Terminology used
Flow
A flow is defined as a unidirectional sequence of
packets with some common properties that pass
through a network device. These collected flows
are exported to an external device, the NetFlow
collector. Network flows are highly granular;
for example, flow records include details such
as IP addresses, packet and byte counts,timestamps,
Type of Service (ToS), application ports,
input and output interfaces, etc.
Exporter
A device (for example, a router) with NetFlow
services enabled. The exporter monitors packets
entering an observation point and creates flows out
of these packets. The information from these flows
are exported in the form of Flow Records to
the collector.
Flow Record
A Flow Record provides information about an IP Flow
that exists on the Exporter. The Flow Records are
commonly referred to as NetFlow Services data or
NetFlow data.
Collector
The NetFlow Collector receives Flow Records from
one or more Exporters. It processes the received
export packet, i.e. parses, stores, display the
Flow Record information. The flow records may be optionally
aggregated before being stored into the hard disk.
Template
NetFlow Version 9 Export format is template based.
Version 9 record format consists of a packet header
followed by at least one or more template or data
FlowSets. A template FlowSet (collection of one or more
template) provides a description of the fields that
will be present in future data FlowSets. Templates
provide an extensible design to the record format,
a feature that should allow future enhancements to
NetFlow services without requiring concurrent changes
to the basic flow-record format.
One additional record type is also a part of
Version 9 specification: an options template. Rather
than supplying information about IP flows, options are
used to supply information about the NetFlow process
configuration or NetFlow process specific data. |
MODULE-IDENTITY |
|
|
|
netflowInterfaceEntry |
1.3.6.1.4.1.3320.9.226.1.1.1.1 |
A conceptual row in the netflowInterfaceEntry. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
NetflowInterfaceEntry |
|
|
netflowCacheTable |
1.3.6.1.4.1.3320.9.226.1.1.2 |
A table containing configuration and statistics per cache.
Cache may be main cache or an aggregation cache. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
SEQUENCE OF |
|
|
|
|
NetflowCacheEntry |
|
netflowCacheEntry |
1.3.6.1.4.1.3320.9.226.1.1.2.1 |
A conceptual row in the netflowCacheEntry. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
NetflowCacheEntry |
|
|
netflowCacheType |
1.3.6.1.4.1.3320.9.226.1.1.2.1.1 |
The type of netflow cache.
NetFlow aggregation maintains one or more extra flow caches
with different combinations of fields that determine
which traditional flows are grouped together. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
NetflowAggregationtypes |
|
|
netflowCacheEnable |
1.3.6.1.4.1.3320.9.226.1.1.2.1.2 |
Indicates whether netflow is enabled for this cache type. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
TruthValue |
|
|
netflowCacheEntries |
1.3.6.1.4.1.3320.9.226.1.1.2.1.3 |
The number of entries that can be cached for this cache type.
The accepted value could be limited based on the amount of
memory available in the system. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Unsigned32 |
|
|
netflowUsedEntries |
1.3.6.1.4.1.3320.9.226.1.1.2.1.4 |
Number of currently used flow entries. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Unsigned32 |
|
|
netflowUnUsedEntries |
1.3.6.1.4.1.3320.9.226.1.1.2.1.5 |
Number of currently available flow entries. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Unsigned32 |
|
|
netflowActiveTimeOut |
1.3.6.1.4.1.3320.9.226.1.1.2.1.6 |
The timeout period (in minutes) for removing active flows
from the cache. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Unsigned32 |
|
|
netflowInactiveTimeOut |
1.3.6.1.4.1.3320.9.226.1.1.2.1.7 |
The timeout period (in seconds) for removing inactive flows
from the cache. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
Unsigned32 |
|
|
netflowCollectorVersionInfoEntry |
1.3.6.1.4.1.3320.9.226.1.2.1.1 |
A conceptual row in the netflowCollectorInfoEntry. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
NetflowCollectorVersionInfoEntry |
|
|
netflowMaxCollectors |
1.3.6.1.4.1.3320.9.226.1.2.2 |
Maximum number of entries allowed in the netflowCollectorTable
for each cache type.
A zero indicates export is not supported in the device.
The agent should set this value during initialization, and
the value for this object cannot be changed during the
system's operation. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Unsigned32 |
|
|
netflowCollectorTable |
1.3.6.1.4.1.3320.9.226.1.2.3 |
A control table to configure the collectors that the netflow
packets are exported to. The number of entries that can be
configured for the cache type is limited by the value of
netflowMaxCollectors. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
SEQUENCE OF |
|
|
|
|
NetflowCollectorEntry |
|
netflowCollectorEntry |
1.3.6.1.4.1.3320.9.226.1.2.3.1 |
A conceptual row in the netflowCollectorEntry. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
NetflowCollectorEntry |
|
|
netflowCollectorAddress |
1.3.6.1.4.1.3320.9.226.1.2.3.1.2 |
The Internet address of the collector. This is the
address which the Netflow data is exported to. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
InetAddress |
|
|
netflowCollectorPort |
1.3.6.1.4.1.3320.9.226.1.2.3.1.3 |
The transport port of the collector which the Netflow data is
exported to. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
InetPortNumber |
|
|
netflowCollectorStatus |
1.3.6.1.4.1.3320.9.226.1.2.3.1.4 |
This object is used to create or delete an entry
in the netflowCollectorTable.
* A row may be created using the 'CreateAndGo' or 'CreateAndWait' option.
When the row is successfully created, the RowStatus would be
set to 'active' by the agent.
* A row may be deleted by setting the RowStatus to 'destroy'.
|
Status: current |
Access: read-create |
OBJECT-TYPE |
|
|
|
|
RowStatus |
|
|
netflowOctetsExport |
1.3.6.1.4.1.3320.9.226.1.3.1 |
total Number of bytes statistics records which were exported. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter32 |
|
|
netflowRecordsExported |
1.3.6.1.4.1.3320.9.226.1.3.2 |
total Number of flow statistics records which were exported. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter32 |
|
|
netflowPktsExported |
1.3.6.1.4.1.3320.9.226.1.3.3 |
Number of packets (udp datagrams) which were exported. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter32 |
|
|
netflowPktsFailed |
1.3.6.1.4.1.3320.9.226.1.3.4 |
Number of times a flow record failed to be exported. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter32 |
|
|
netflowTemplateTable |
1.3.6.1.4.1.3320.9.226.1.4.2 |
A control table to provide statistics of version 9
Flow and Option templates. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
SEQUENCE OF |
|
|
|
|
NetflowTemplateEntry |
|
netflowTemplateEntry |
1.3.6.1.4.1.3320.9.226.1.4.2.1 |
A conceptual row in the netflowTemplateEntry. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
NetflowTemplateEntry |
|
|
netflowTemplateType |
1.3.6.1.4.1.3320.9.226.1.4.2.1.1 |
Defines the structure and interpretation of fields in a data
record and serves as an INDEX in this table. Version 9 has two
types of Templates: Flow Templates and Option Templates. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
NetflowTemplateTypes |
|
|
netflowTemplateExportInfoEntry |
1.3.6.1.4.1.3320.9.226.1.4.3.1 |
A conceptual row in the netflowTemplateExportInfoEntry. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
NetflowTemplateExportInfoEntry |
|
|