1--
2-- ----------------------------------------------------------------------------
3-- "THE BEER-WARE LICENSE" (Revision 42):
4-- <philip@FreeBSD.org> wrote this file.  As long as you retain this notice you
5-- can do whatever you want with this stuff. If we meet some day, and you think
6-- this stuff is worth it, you can buy me a beer in return.   -Philip Paeps
7-- ----------------------------------------------------------------------------
8--
9-- $FreeBSD$
10--
11
12BEGEMOT-PF-MIB DEFINITIONS ::= BEGIN
13
14IMPORTS
15    MODULE-IDENTITY, OBJECT-TYPE, Counter64, Integer32,
16    TimeTicks, Unsigned32
17	FROM SNMPv2-SMI
18    TruthValue
19	FROM SNMPv2-TC
20    InetAddress, InetAddressType, InetAddressPrefixLength
21	FROM INET-ADDRESS-MIB
22    begemot
23	FROM BEGEMOT-MIB;
24
25begemotPf MODULE-IDENTITY
26    LAST-UPDATED "201003180000Z"
27    ORGANIZATION "NixSys BVBA"
28    CONTACT-INFO
29	    "		Philip Paeps
30
31	     Postal:	NixSys BVBA
32			Louizastraat 14
33			BE-2800 Mechelen
34			Belgium
35
36	     E-Mail:	philip@FreeBSD.org"
37    DESCRIPTION
38	    "The Begemot MIB for the pf packet filter."
39    REVISION	"201003180000Z"
40    DESCRIPTION
41		"Modified pfTablesAddrEntry to support IPv6
42		addresses - added pfTablesAddrNetType column
43		and modified type of pfTablesAddrNet to
44		InetAddress."
45    REVISION	"200912050000Z"
46    DESCRIPTION
47	    "Added support for retrieving counters of labeled
48	    pf filter rules via pfLabelspfLabels subtree."
49    REVISION	"200501240000Z"
50    DESCRIPTION
51	    "Initial revision."
52
53    ::= { begemot 200 }
54
55begemotPfObjects	OBJECT IDENTIFIER ::= { begemotPf 1 }
56
57-- --------------------------------------------------------------------------
58
59pfStatus		OBJECT IDENTIFIER ::= { begemotPfObjects 1 }
60pfCounter		OBJECT IDENTIFIER ::= { begemotPfObjects 2 }
61pfStateTable		OBJECT IDENTIFIER ::= { begemotPfObjects 3 }
62pfSrcNodes		OBJECT IDENTIFIER ::= { begemotPfObjects 4 }
63pfLimits		OBJECT IDENTIFIER ::= { begemotPfObjects 5 }
64pfTimeouts		OBJECT IDENTIFIER ::= { begemotPfObjects 6 }
65pfLogInterface		OBJECT IDENTIFIER ::= { begemotPfObjects 7 }
66pfInterfaces		OBJECT IDENTIFIER ::= { begemotPfObjects 8 }
67pfTables		OBJECT IDENTIFIER ::= { begemotPfObjects 9 }
68pfAltq			OBJECT IDENTIFIER ::= { begemotPfObjects 10 }
69pfLabels		OBJECT IDENTIFIER ::= { begemotPfObjects 11 }
70
71-- --------------------------------------------------------------------------
72
73--
74-- status information
75--
76
77pfStatusRunning OBJECT-TYPE
78    SYNTAX	TruthValue
79    MAX-ACCESS	read-only
80    STATUS	current
81    DESCRIPTION
82	"True if pf is currently enabled."
83    ::= { pfStatus 1 }
84
85pfStatusRuntime OBJECT-TYPE
86    SYNTAX	TimeTicks
87    UNITS	"1/100th of a Second"
88    MAX-ACCESS	read-only
89    STATUS	current
90    DESCRIPTION
91	"Indicates how long pf has been enabled.  If pf is not currently
92	enabled, indicates how long it has been disabled.  If pf has not
93	been enabled or disabled since the system was started, the value
94	will be 0."
95    ::= { pfStatus 2 }
96
97pfStatusDebug OBJECT-TYPE
98    SYNTAX	INTEGER { none(0), urgent(1), misc(2), loud(3) }
99    MAX-ACCESS	read-only
100    STATUS	current
101    DESCRIPTION
102	"Indicates the debug level at which pf is running."
103    ::= { pfStatus 3 }
104
105pfStatusHostId OBJECT-TYPE
106    SYNTAX	OCTET STRING
107    MAX-ACCESS	read-only
108    STATUS	current
109    DESCRIPTION
110	"The (unique) host identifier of the machine running pf."
111    ::= { pfStatus 4 }
112
113-- --------------------------------------------------------------------------
114
115--
116-- counters
117--
118
119pfCounterMatch OBJECT-TYPE
120    SYNTAX	Counter64
121    MAX-ACCESS	read-only
122    STATUS	current
123    DESCRIPTION
124	"Number of packets that matched a filter rule."
125    ::= { pfCounter 1 }
126
127pfCounterBadOffset OBJECT-TYPE
128    SYNTAX	Counter64
129    MAX-ACCESS	read-only
130    STATUS	current
131    DESCRIPTION
132	"Number of packets with bad offset."
133    ::= { pfCounter 2 }
134
135pfCounterFragment OBJECT-TYPE
136    SYNTAX	Counter64
137    MAX-ACCESS	read-only
138    STATUS	current
139    DESCRIPTION
140	"Number of fragmented packets."
141    ::= { pfCounter 3 }
142
143pfCounterShort OBJECT-TYPE
144    SYNTAX	Counter64
145    MAX-ACCESS	read-only
146    STATUS	current
147    DESCRIPTION
148	"Number of short packets."
149    ::= { pfCounter 4 }
150
151pfCounterNormalize OBJECT-TYPE
152    SYNTAX	Counter64
153    MAX-ACCESS	read-only
154    STATUS	current
155    DESCRIPTION
156	"Number of normalized packets."
157    ::= { pfCounter 5 }
158
159pfCounterMemDrop OBJECT-TYPE
160    SYNTAX	Counter64
161    MAX-ACCESS	read-only
162    STATUS	current
163    DESCRIPTION
164	"Number of packets dropped due to memory limitations."
165    ::= { pfCounter 6 }
166
167-- --------------------------------------------------------------------------
168
169--
170-- state table
171--
172
173pfStateTableCount OBJECT-TYPE
174    SYNTAX	Unsigned32
175    MAX-ACCESS	read-only
176    STATUS	current
177    DESCRIPTION
178	"Number of entries in the state table."
179    ::= { pfStateTable 1 }
180
181pfStateTableSearches OBJECT-TYPE
182    SYNTAX	Counter64
183    MAX-ACCESS	read-only
184    STATUS	current
185    DESCRIPTION
186	"Number of searches against the state table."
187    ::= { pfStateTable 2 }
188
189pfStateTableInserts OBJECT-TYPE
190    SYNTAX	Counter64
191    MAX-ACCESS	read-only
192    STATUS	current
193    DESCRIPTION
194	"Number of entries inserted into the state table."
195    ::= { pfStateTable 3 }
196
197pfStateTableRemovals OBJECT-TYPE
198    SYNTAX	Counter64
199    MAX-ACCESS	read-only
200    STATUS	current
201    DESCRIPTION
202	"Number of entries removed from the state table."
203    ::= { pfStateTable 4 }
204
205-- --------------------------------------------------------------------------
206
207--
208-- source nodes
209--
210
211pfSrcNodesCount OBJECT-TYPE
212    SYNTAX	Unsigned32
213    MAX-ACCESS	read-only
214    STATUS	current
215    DESCRIPTION
216	"Number of entries in the source tracking table."
217    ::= { pfSrcNodes 1 }
218
219pfSrcNodesSearches OBJECT-TYPE
220    SYNTAX	Counter64
221    MAX-ACCESS	read-only
222    STATUS	current
223    DESCRIPTION
224	"Number of searches against the source tracking table."
225    ::= { pfSrcNodes 2 }
226
227pfSrcNodesInserts OBJECT-TYPE
228    SYNTAX	Counter64
229    MAX-ACCESS	read-only
230    STATUS	current
231    DESCRIPTION
232	"Number of entries inserted into the source tracking table."
233    ::= { pfSrcNodes 3 }
234
235pfSrcNodesRemovals OBJECT-TYPE
236    SYNTAX	Counter64
237    MAX-ACCESS	read-only
238    STATUS	current
239    DESCRIPTION
240	"Number of entries removed from the source tracking table."
241    ::= { pfSrcNodes 4 }
242
243-- --------------------------------------------------------------------------
244
245--
246-- limits
247--
248
249pfLimitsStates OBJECT-TYPE
250    SYNTAX	Unsigned32
251    MAX-ACCESS	read-only
252    STATUS	current
253    DESCRIPTION
254	"Maximum number of 'keep state' rules in the ruleset."
255    ::= { pfLimits 1 }
256
257pfLimitsSrcNodes OBJECT-TYPE
258    SYNTAX	Unsigned32
259    MAX-ACCESS	read-only
260    STATUS	current
261    DESCRIPTION
262	"Maximum number of 'sticky-address' or 'source-track' rules
263	in the ruleset."
264    ::= { pfLimits 2 }
265
266pfLimitsFrags OBJECT-TYPE
267    SYNTAX	Unsigned32
268    MAX-ACCESS	read-only
269    STATUS	current
270    DESCRIPTION
271	"Maximum number of 'scrub' rules in the ruleset."
272    ::= { pfLimits 3 }
273
274-- --------------------------------------------------------------------------
275
276--
277-- timeouts
278--
279
280pfTimeoutsTcpFirst OBJECT-TYPE
281    SYNTAX	Integer32
282    MAX-ACCESS	read-only
283    STATUS	current
284    DESCRIPTION
285	"State after the first packet in a connection."
286    ::= { pfTimeouts 1 }
287
288pfTimeoutsTcpOpening OBJECT-TYPE
289    SYNTAX	Integer32
290    MAX-ACCESS	read-only
291    STATUS	current
292    DESCRIPTION
293	"State before the destination host ever sends a packet."
294    ::= { pfTimeouts 2 }
295
296pfTimeoutsTcpEstablished OBJECT-TYPE
297    SYNTAX	Integer32
298    MAX-ACCESS	read-only
299    STATUS	current
300    DESCRIPTION
301	"The fully established state."
302    ::= { pfTimeouts 3 }
303
304pfTimeoutsTcpClosing OBJECT-TYPE
305    SYNTAX	Integer32
306    MAX-ACCESS	read-only
307    STATUS	current
308    DESCRIPTION
309	"State after the first FIN has been sent."
310    ::= { pfTimeouts 4 }
311
312pfTimeoutsTcpFinWait OBJECT-TYPE
313    SYNTAX	Integer32
314    MAX-ACCESS	read-only
315    STATUS	current
316    DESCRIPTION
317	"State after both FINs have been exchanged and the
318	connection is closed."
319    ::= { pfTimeouts 5 }
320
321pfTimeoutsTcpClosed OBJECT-TYPE
322    SYNTAX	Integer32
323    MAX-ACCESS	read-only
324    STATUS	current
325    DESCRIPTION
326	"State after one endpoint sends an RST."
327    ::= { pfTimeouts 6 }
328
329pfTimeoutsUdpFirst OBJECT-TYPE
330    SYNTAX	Integer32
331    MAX-ACCESS	read-only
332    STATUS	current
333    DESCRIPTION
334	"State after the first packet."
335    ::= { pfTimeouts 7 }
336
337pfTimeoutsUdpSingle OBJECT-TYPE
338    SYNTAX	Integer32
339    MAX-ACCESS	read-only
340    STATUS	current
341    DESCRIPTION
342	"State if the source host sends more than one packet but
343	the destination host has never sent one back."
344    ::= { pfTimeouts 8 }
345
346pfTimeoutsUdpMultiple OBJECT-TYPE
347    SYNTAX	Integer32
348    MAX-ACCESS	read-only
349    STATUS	current
350    DESCRIPTION
351	"State if both hosts have sent packets."
352    ::= { pfTimeouts 9 }
353
354pfTimeoutsIcmpFirst OBJECT-TYPE
355    SYNTAX	Integer32
356    MAX-ACCESS	read-only
357    STATUS	current
358    DESCRIPTION
359	"State after the first packet."
360    ::= { pfTimeouts 10 }
361
362pfTimeoutsIcmpError OBJECT-TYPE
363    SYNTAX	Integer32
364    MAX-ACCESS	read-only
365    STATUS	current
366    DESCRIPTION
367	"State after an ICMP error came back in response to an
368	ICMP packet."
369    ::= { pfTimeouts 11 }
370
371pfTimeoutsOtherFirst OBJECT-TYPE
372    SYNTAX	Integer32
373    MAX-ACCESS	read-only
374    STATUS	current
375    DESCRIPTION
376	"State after the first packet."
377    ::= { pfTimeouts 12 }
378
379pfTimeoutsOtherSingle OBJECT-TYPE
380    SYNTAX	Integer32
381    MAX-ACCESS	read-only
382    STATUS	current
383    DESCRIPTION
384	"State if the source host sends more than one packet but
385	the destination host has never sent one back."
386    ::= { pfTimeouts 13 }
387
388pfTimeoutsOtherMultiple OBJECT-TYPE
389    SYNTAX	Integer32
390    MAX-ACCESS	read-only
391    STATUS	current
392    DESCRIPTION
393	"State if both hosts have sent packets."
394    ::= { pfTimeouts 14 }
395
396pfTimeoutsFragment OBJECT-TYPE
397    SYNTAX	Integer32
398    MAX-ACCESS	read-only
399    STATUS	current
400    DESCRIPTION
401	"Seconds before an unassembled fragment is expired."
402    ::= { pfTimeouts 15 }
403
404pfTimeoutsInterval OBJECT-TYPE
405    SYNTAX	Integer32
406    MAX-ACCESS	read-only
407    STATUS	current
408    DESCRIPTION
409	"Interval between purging expired states and fragments."
410    ::= { pfTimeouts 16 }
411
412pfTimeoutsAdaptiveStart OBJECT-TYPE
413    SYNTAX	Integer32
414    MAX-ACCESS	read-only
415    STATUS	current
416    DESCRIPTION
417	"When the number of state entries exceeds this value,
418	adaptive scaling begins."
419    ::= { pfTimeouts 17 }
420
421pfTimeoutsAdaptiveEnd OBJECT-TYPE
422    SYNTAX	Integer32
423    MAX-ACCESS	read-only
424    STATUS	current
425    DESCRIPTION
426	"When reaching this number of state entries, all timeout
427	values become zero, effectively purging all state entries
428	immediately."
429    ::= { pfTimeouts 18 }
430
431pfTimeoutsSrcNode OBJECT-TYPE
432    SYNTAX	Integer32
433    MAX-ACCESS	read-only
434    STATUS	current
435    DESCRIPTION
436	"Length of time to retain a source tracking entry after
437	the last state expires."
438    ::= { pfTimeouts 19 }
439
440-- --------------------------------------------------------------------------
441
442--
443-- log interface
444--
445
446pfLogInterfaceName OBJECT-TYPE
447    SYNTAX	OCTET STRING
448    MAX-ACCESS	read-only
449    STATUS	current
450    DESCRIPTION
451	"The name of the interface configured with 'set loginterface'.
452	If no interface has been configured, the object will be empty."
453    ::= { pfLogInterface 1 }
454
455pfLogInterfaceIp4BytesIn OBJECT-TYPE
456    SYNTAX	Counter64
457    MAX-ACCESS	read-only
458    STATUS	current
459    DESCRIPTION
460	"Number of IPv4 bytes passed in on the loginterface."
461    ::= { pfLogInterface 2 }
462
463pfLogInterfaceIp4BytesOut OBJECT-TYPE
464    SYNTAX	Counter64
465    MAX-ACCESS	read-only
466    STATUS	current
467    DESCRIPTION
468	"Number of IPv4 bytes passed out on the loginterface."
469    ::= { pfLogInterface 3 }
470
471pfLogInterfaceIp4PktsInPass OBJECT-TYPE
472    SYNTAX	Counter64
473    MAX-ACCESS	read-only
474    STATUS	current
475    DESCRIPTION
476	"Number of IPv4 packets passed in on the loginterface."
477    ::= { pfLogInterface 4 }
478
479pfLogInterfaceIp4PktsInDrop OBJECT-TYPE
480    SYNTAX	Counter64
481    MAX-ACCESS	read-only
482    STATUS	current
483    DESCRIPTION
484	"Number of IPv4 packets dropped coming in on the loginterface."
485    ::= { pfLogInterface 5 }
486
487pfLogInterfaceIp4PktsOutPass OBJECT-TYPE
488    SYNTAX	Counter64
489    MAX-ACCESS	read-only
490    STATUS	current
491    DESCRIPTION
492	"Number of IPv4 packets passed out on the loginterface."
493    ::= { pfLogInterface 6 }
494
495pfLogInterfaceIp4PktsOutDrop OBJECT-TYPE
496    SYNTAX	Counter64
497    MAX-ACCESS	read-only
498    STATUS	current
499    DESCRIPTION
500	"Number of IPv4 packets dropped going out on the loginterface."
501    ::= { pfLogInterface 7 }
502
503pfLogInterfaceIp6BytesIn OBJECT-TYPE
504    SYNTAX	Counter64
505    MAX-ACCESS	read-only
506    STATUS	current
507    DESCRIPTION
508	"Number of IPv6 bytes passed in on the loginterface."
509    ::= { pfLogInterface 8 }
510
511pfLogInterfaceIp6BytesOut OBJECT-TYPE
512    SYNTAX	Counter64
513    MAX-ACCESS	read-only
514    STATUS	current
515    DESCRIPTION
516	"Number of IPv6 bytes passed out on the loginterface."
517    ::= { pfLogInterface 9 }
518
519pfLogInterfaceIp6PktsInPass OBJECT-TYPE
520    SYNTAX	Counter64
521    MAX-ACCESS	read-only
522    STATUS	current
523    DESCRIPTION
524	"Number of IPv6 packets passed in on the loginterface."
525    ::= { pfLogInterface 10 }
526
527pfLogInterfaceIp6PktsInDrop OBJECT-TYPE
528    SYNTAX	Counter64
529    MAX-ACCESS	read-only
530    STATUS	current
531    DESCRIPTION
532	"Number of IPv6 packets dropped coming in on the loginterface."
533    ::= { pfLogInterface 11 }
534
535pfLogInterfaceIp6PktsOutPass OBJECT-TYPE
536    SYNTAX	Counter64
537    MAX-ACCESS	read-only
538    STATUS	current
539    DESCRIPTION
540	"Number of IPv6 packets passed out on the loginterface."
541    ::= { pfLogInterface 12 }
542
543pfLogInterfaceIp6PktsOutDrop OBJECT-TYPE
544    SYNTAX	Counter64
545    MAX-ACCESS	read-only
546    STATUS	current
547    DESCRIPTION
548	"Number of IPv6 packets dropped going out on the loginterface."
549    ::= { pfLogInterface 13 }
550
551-- --------------------------------------------------------------------------
552
553--
554-- interfaces
555--
556
557pfInterfacesIfNumber OBJECT-TYPE
558    SYNTAX	Integer32
559    MAX-ACCESS	read-only
560    STATUS	current
561    DESCRIPTION
562	"The number of network interfaces on this system."
563    ::= { pfInterfaces 1 }
564
565pfInterfacesIfTable OBJECT-TYPE
566    SYNTAX	SEQUENCE OF PfInterfacesIfEntry
567    MAX-ACCESS	not-accessible
568    STATUS	current
569    DESCRIPTION
570	"Table of network interfaces, indexed on pfInterfacesIfNumber."
571    ::= { pfInterfaces 2 }
572
573pfInterfacesIfEntry OBJECT-TYPE
574    SYNTAX	PfInterfacesIfEntry
575    MAX-ACCESS	not-accessible
576    STATUS	current
577    DESCRIPTION
578	"An entry in the pfInterfacesIfTable containing information
579	about a particular network interface in the machine."
580    INDEX	{ pfInterfacesIfIndex }
581    ::= { pfInterfacesIfTable 1 }
582
583PfInterfacesIfEntry ::= SEQUENCE {
584    pfInterfacesIfIndex		    Integer32,
585    pfInterfacesIfDescr		    OCTET STRING,
586    pfInterfacesIfType		    INTEGER,
587    pfInterfacesIfTZero		    TimeTicks,
588    pfInterfacesIfRefsState	    Null,
589    pfInterfacesIfRefsRule	    Unsigned32,
590    pfInterfacesIf4BytesInPass	    Counter64,
591    pfInterfacesIf4BytesInBlock	    Counter64,
592    pfInterfacesIf4BytesOutPass	    Counter64,
593    pfInterfacesIf4BytesOutBlock    Counter64,
594    pfInterfacesIf4PktsInPass	    Counter64,
595    pfInterfacesIf4PktsInBlock	    Counter64,
596    pfInterfacesIf4PktsOutPass	    Counter64,
597    pfInterfacesIf4PktsOutBlock	    Counter64,
598    pfInterfacesIf6BytesInPass	    Counter64,
599    pfInterfacesIf6BytesInBlock	    Counter64,
600    pfInterfacesIf6BytesOutPass	    Counter64,
601    pfInterfacesIf6BytesOutBlock    Counter64,
602    pfInterfacesIf6PktsInPass	    Counter64,
603    pfInterfacesIf6PktsInBlock	    Counter64,
604    pfInterfacesIf6PktsOutPass	    Counter64,
605    pfInterfacesIf6PktsOutBlock	    Counter64
606}
607
608pfInterfacesIfIndex OBJECT-TYPE
609    SYNTAX	Integer32 (1..2147483647)
610    MAX-ACCESS	not-accessible
611    STATUS	current
612    DESCRIPTION
613	"A unique value, greater than zero, for each interface."
614    ::= { pfInterfacesIfEntry 1 }
615
616pfInterfacesIfDescr OBJECT-TYPE
617    SYNTAX	OCTET STRING
618    MAX-ACCESS	read-only
619    STATUS	current
620    DESCRIPTION
621	"The name of the interface."
622    ::= { pfInterfacesIfEntry 2 }
623
624pfInterfacesIfType OBJECT-TYPE
625    SYNTAX	INTEGER { group(0), instance(1), detached(2) }
626    MAX-ACCESS	read-only
627    STATUS	current
628    DESCRIPTION
629	"Indicates whether the interface is a group inteface, an
630	interface instance, or whether it has been removed or
631	destroyed."
632    ::= { pfInterfacesIfEntry 3 }
633
634pfInterfacesIfTZero OBJECT-TYPE
635    SYNTAX	TimeTicks
636    UNITS	"1/100th of a Second"
637    MAX-ACCESS	read-only
638    STATUS	current
639    DESCRIPTION
640	"Time since statistics were last reset or since the
641	interface was loaded."
642    ::= { pfInterfacesIfEntry 4 }
643
644pfInterfacesIfRefsState OBJECT-TYPE
645    SYNTAX	Unsigned32
646    MAX-ACCESS	read-only
647    STATUS	current
648    DESCRIPTION
649	"The number of state and/or source track entries referencing
650	this interface."
651    ::= { pfInterfacesIfEntry 5 }
652
653pfInterfacesIfRefsRule OBJECT-TYPE
654    SYNTAX	Unsigned32
655    MAX-ACCESS	read-only
656    STATUS	current
657    DESCRIPTION
658	"The number of rules referencing this interface."
659    ::= { pfInterfacesIfEntry 6 }
660
661pfInterfacesIf4BytesInPass OBJECT-TYPE
662    SYNTAX	Counter64
663    MAX-ACCESS	read-only
664    STATUS	current
665    DESCRIPTION
666	"The number of IPv4 bytes passed coming in on this interface."
667    ::= { pfInterfacesIfEntry 7 }
668
669pfInterfacesIf4BytesInBlock OBJECT-TYPE
670    SYNTAX	Counter64
671    MAX-ACCESS	read-only
672    STATUS	current
673    DESCRIPTION
674	"The number of IPv4 bytes blocked coming in on this interface."
675    ::= { pfInterfacesIfEntry 8 }
676
677pfInterfacesIf4BytesOutPass OBJECT-TYPE
678    SYNTAX	Counter64
679    MAX-ACCESS	read-only
680    STATUS	current
681    DESCRIPTION
682	"The number of IPv4 bytes passed going out on this interface."
683    ::= { pfInterfacesIfEntry 9 }
684
685pfInterfacesIf4BytesOutBlock OBJECT-TYPE
686    SYNTAX	Counter64
687    MAX-ACCESS	read-only
688    STATUS	current
689    DESCRIPTION
690	"The number of IPv4 bytes blocked going out on this interface."
691    ::= { pfInterfacesIfEntry 10 }
692
693pfInterfacesIf4PktsInPass OBJECT-TYPE
694    SYNTAX	Counter64
695    MAX-ACCESS	read-only
696    STATUS	current
697    DESCRIPTION
698	"The number of IPv4 packets passed coming in on this interface."
699    ::= { pfInterfacesIfEntry 11 }
700
701pfInterfacesIf4PktsInBlock OBJECT-TYPE
702    SYNTAX	Counter64
703    MAX-ACCESS	read-only
704    STATUS	current
705    DESCRIPTION
706	"The number of IPv4 packets blocked coming in on this interface."
707    ::= { pfInterfacesIfEntry 12 }
708
709pfInterfacesIf4PktsOutPass OBJECT-TYPE
710    SYNTAX	Counter64
711    MAX-ACCESS	read-only
712    STATUS	current
713    DESCRIPTION
714	"The number of IPv4 packets passed going out on this interface."
715    ::= { pfInterfacesIfEntry 13 }
716
717pfInterfacesIf4PktsOutBlock OBJECT-TYPE
718    SYNTAX	Counter64
719    MAX-ACCESS	read-only
720    STATUS	current
721    DESCRIPTION
722	"The number of IPv4 packets blocked going out on this interface."
723    ::= { pfInterfacesIfEntry 14 }
724
725pfInterfacesIf6BytesInPass OBJECT-TYPE
726    SYNTAX	Counter64
727    MAX-ACCESS	read-only
728    STATUS	current
729    DESCRIPTION
730	"The number of IPv6 bytes passed coming in on this interface."
731    ::= { pfInterfacesIfEntry 15 }
732
733pfInterfacesIf6BytesInBlock OBJECT-TYPE
734    SYNTAX	Counter64
735    MAX-ACCESS	read-only
736    STATUS	current
737    DESCRIPTION
738	"The number of IPv6 bytes blocked coming in on this interface."
739    ::= { pfInterfacesIfEntry 16 }
740
741pfInterfacesIf6BytesOutPass OBJECT-TYPE
742    SYNTAX	Counter64
743    MAX-ACCESS	read-only
744    STATUS	current
745    DESCRIPTION
746	"The number of IPv6 bytes passed going out on this interface."
747    ::= { pfInterfacesIfEntry 17 }
748
749pfInterfacesIf6BytesOutBlock OBJECT-TYPE
750    SYNTAX	Counter64
751    MAX-ACCESS	read-only
752    STATUS	current
753    DESCRIPTION
754	"The number of IPv6 bytes blocked going out on this interface."
755    ::= { pfInterfacesIfEntry 18 }
756
757
758pfInterfacesIf6PktsInPass OBJECT-TYPE
759    SYNTAX	Counter64
760    MAX-ACCESS	read-only
761    STATUS	current
762    DESCRIPTION
763	"The number of IPv6 packets passed coming in on this interface."
764    ::= { pfInterfacesIfEntry 19 }
765
766pfInterfacesIf6PktsInBlock OBJECT-TYPE
767    SYNTAX	Counter64
768    MAX-ACCESS	read-only
769    STATUS	current
770    DESCRIPTION
771	"The number of IPv6 packets blocked coming in on this interface."
772    ::= { pfInterfacesIfEntry 20 }
773
774pfInterfacesIf6PktsOutPass OBJECT-TYPE
775    SYNTAX	Counter64
776    MAX-ACCESS	read-only
777    STATUS	current
778    DESCRIPTION
779	"The number of IPv6 packets passed going out on this interface."
780    ::= { pfInterfacesIfEntry 21 }
781
782pfInterfacesIf6PktsOutBlock OBJECT-TYPE
783    SYNTAX	Counter64
784    MAX-ACCESS	read-only
785    STATUS	current
786    DESCRIPTION
787	"The number of IPv6 packets blocked going out on this interface."
788    ::= { pfInterfacesIfEntry 22 }
789
790-- --------------------------------------------------------------------------
791
792--
793-- tables
794--
795
796pfTablesTblNumber OBJECT-TYPE
797    SYNTAX	Integer32
798    MAX-ACCESS	read-only
799    STATUS	current
800    DESCRIPTION
801	"The number of tables on this system."
802    ::= { pfTables 1 }
803
804pfTablesTblTable OBJECT-TYPE
805    SYNTAX	SEQUENCE OF PfTablesTblEntry
806    MAX-ACCESS	not-accessible
807    STATUS	current
808    DESCRIPTION
809	"Table of tables, index on pfTablesTblIndex."
810    ::= { pfTables 2 }
811
812pfTablesTblEntry OBJECT-TYPE
813    SYNTAX	PfTablesTblEntry
814    MAX-ACCESS	not-accessible
815    STATUS	current
816    DESCRIPTION
817	"Any entry in the pfTablesTblTable containing information
818	about a particular table on the system."
819    INDEX	{ pfTablesTblIndex }
820    ::= { pfTablesTblTable 1 }
821
822PfTablesTblEntry ::= SEQUENCE {
823    pfTablesTblIndex		    Integer32,
824    pfTablesTblDescr		    OCTET STRING,
825    pfTablesTblCount		    Integer32,
826    pfTablesTblTZero		    TimeTicks,
827    pfTablesTblRefsAnchor	    Integer32,
828    pfTablesTblRefsRule		    Integer32,
829    pfTablesTblEvalMatch	    Counter64,
830    pfTablesTblEvalNoMatch	    Counter64,
831    pfTablesTblBytesInPass	    Counter64,
832    pfTablesTblBytesInBlock	    Counter64,
833    pfTablesTblBytesInXPass	    Counter64,
834    pfTablesTblBytesOutPass	    Counter64,
835    pfTablesTblBytesOutBlock	    Counter64,
836    pfTablesTblBytesOutXPass	    Counter64,
837    pfTablesTblPktsInPass	    Counter64,
838    pfTablesTblPktsInBlock	    Counter64,
839    pfTablesTblPktsInXPass	    Counter64,
840    pfTablesTblPktsOutPass	    Counter64,
841    pfTablesTblPktsOutBlock	    Counter64,
842    pfTablesTblPktsOutXPass	    Counter64
843}
844
845pfTablesTblIndex OBJECT-TYPE
846    SYNTAX	Integer32 (1..2147483647)
847    MAX-ACCESS  not-accessible
848    STATUS	current
849    DESCRIPTION
850        "A unique value, greater than zero, for each table."
851    ::= { pfTablesTblEntry 1 }
852
853pfTablesTblDescr OBJECT-TYPE
854    SYNTAX	OCTET STRING
855    MAX-ACCESS  read-only
856    STATUS	current
857    DESCRIPTION
858        "The name of the table."
859    ::= { pfTablesTblEntry 2 }
860
861pfTablesTblCount OBJECT-TYPE
862    SYNTAX	Integer32
863    MAX-ACCESS  read-only
864    STATUS	current
865    DESCRIPTION
866        "The number of addresses in the table."
867    ::= { pfTablesTblEntry 3 }
868
869pfTablesTblTZero OBJECT-TYPE
870    SYNTAX	TimeTicks
871    UNITS	"1/100th of a Second"
872    MAX-ACCESS  read-only
873    STATUS	current
874    DESCRIPTION
875        "The time passed since the statistics of this table were last
876        cleared or the time since this table was loaded, whichever is
877        sooner."
878    ::= { pfTablesTblEntry 4 }
879
880pfTablesTblRefsAnchor OBJECT-TYPE
881    SYNTAX	Integer32
882    MAX-ACCESS  read-only
883    STATUS	current
884    DESCRIPTION
885        "The number of anchors referencing this table."
886    ::= { pfTablesTblEntry 5 }
887
888pfTablesTblRefsRule OBJECT-TYPE
889    SYNTAX	Integer32
890    MAX-ACCESS  read-only
891    STATUS	current
892    DESCRIPTION
893        "The number of rules referencing this table."
894    ::= { pfTablesTblEntry 6 }
895
896pfTablesTblEvalMatch OBJECT-TYPE
897    SYNTAX	Counter64
898    MAX-ACCESS  read-only
899    STATUS	current
900    DESCRIPTION
901        "The number of evaluations returning a match."
902    ::= { pfTablesTblEntry 7 }
903
904pfTablesTblEvalNoMatch OBJECT-TYPE
905    SYNTAX	Counter64
906    MAX-ACCESS  read-only
907    STATUS	current
908    DESCRIPTION
909        "The number of evaluations not returning a match."
910    ::= { pfTablesTblEntry 8 }
911
912pfTablesTblBytesInPass OBJECT-TYPE
913    SYNTAX	Counter64
914    MAX-ACCESS  read-only
915    STATUS	current
916    DESCRIPTION
917        "The number of bytes passed in matching the table."
918    ::= { pfTablesTblEntry 9 }
919
920pfTablesTblBytesInBlock	OBJECT-TYPE
921    SYNTAX	Counter64
922    MAX-ACCESS  read-only
923    STATUS	current
924    DESCRIPTION
925        "The number of bytes blocked coming in matching the table."
926    ::= { pfTablesTblEntry 10 }
927
928pfTablesTblBytesInXPass OBJECT-TYPE
929    SYNTAX	Counter64
930    MAX-ACCESS  read-only
931    STATUS	current
932    DESCRIPTION
933        "The number of bytes statefully passed in where the state
934        entry refers to the table, but the table no longer contains
935	the address in question."
936    ::= { pfTablesTblEntry 11 }
937
938pfTablesTblBytesOutPass	OBJECT-TYPE
939    SYNTAX	Counter64
940    MAX-ACCESS  read-only
941    STATUS	current
942    DESCRIPTION
943        "The number of bytes passed out matching the table."
944    ::= { pfTablesTblEntry 12 }
945
946pfTablesTblBytesOutBlock OBJECT-TYPE
947    SYNTAX	Counter64
948    MAX-ACCESS  read-only
949    STATUS	current
950    DESCRIPTION
951        "The number of bytes blocked going out matching the table."
952    ::= { pfTablesTblEntry 13 }
953
954pfTablesTblBytesOutXPass OBJECT-TYPE
955    SYNTAX	Counter64
956    MAX-ACCESS  read-only
957    STATUS	current
958    DESCRIPTION
959        "The number of bytes statefully passed out where the state
960        entry refers to the table, but the table no longer contains
961	the address in question."
962    ::= { pfTablesTblEntry 14 }
963
964pfTablesTblPktsInPass OBJECT-TYPE
965    SYNTAX	Counter64
966    MAX-ACCESS  read-only
967    STATUS	current
968    DESCRIPTION
969        "The number of packets passed in matching the table."
970    ::= { pfTablesTblEntry 15 }
971
972pfTablesTblPktsInBlock OBJECT-TYPE
973    SYNTAX	Counter64
974    MAX-ACCESS  read-only
975    STATUS	current
976    DESCRIPTION
977        "The number of packets blocked coming in matching the table."
978    ::= { pfTablesTblEntry 16 }
979
980pfTablesTblPktsInXPass OBJECT-TYPE
981    SYNTAX	Counter64
982    MAX-ACCESS  read-only
983    STATUS	current
984    DESCRIPTION
985        "The number of packets statefully passed in where the state
986        entry refers to the table, but the table no longer contains
987	the address in question."
988    ::= { pfTablesTblEntry 17 }
989
990pfTablesTblPktsOutPass OBJECT-TYPE
991    SYNTAX	Counter64
992    MAX-ACCESS  read-only
993    STATUS	current
994    DESCRIPTION
995        "The number of packets passed out matching the table."
996    ::= { pfTablesTblEntry 18 }
997
998pfTablesTblPktsOutBlock OBJECT-TYPE
999    SYNTAX	Counter64
1000    MAX-ACCESS  read-only
1001    STATUS	current
1002    DESCRIPTION
1003        "The number of packets blocked going out matching the table."
1004    ::= { pfTablesTblEntry 19 }
1005
1006pfTablesTblPktsOutXPass OBJECT-TYPE
1007    SYNTAX	Counter64
1008    MAX-ACCESS  read-only
1009    STATUS	current
1010    DESCRIPTION
1011        "The number of packets statefully passed out where the state
1012        entry refers to the table, but the table no longer contains
1013	the address in question."
1014    ::= { pfTablesTblEntry 20 }
1015
1016pfTablesAddrTable OBJECT-TYPE
1017    SYNTAX	SEQUENCE OF PfTablesAddrEntry
1018    MAX-ACCESS  not-accessible
1019    STATUS	current
1020    DESCRIPTION
1021        "Table of addresses from every table on the system."
1022    ::= { pfTables 3 }
1023
1024pfTablesAddrEntry OBJECT-TYPE
1025    SYNTAX	PfTablesAddrEntry
1026    MAX-ACCESS  not-accessible
1027    STATUS	current
1028    DESCRIPTION
1029        "An entry in the pfTablesAddrTable containing information
1030        about a particular entry in a table."
1031    INDEX	{ pfTablesAddrIndex }
1032    ::= { pfTablesAddrTable 1 }
1033
1034PfTablesAddrEntry ::= SEQUENCE {
1035    pfTablesAddrIndex		    Integer32,
1036    pfTablesAddrNetType		    InetAddressType,
1037    pfTablesAddrNet		    InetAddress,
1038    pfTablesAddrPrefix		    InetAddressPrefixLength,
1039    pfTablesAddrTZero		    TimeTicks,
1040    pfTablesAddrBytesInPass	    Counter64,
1041    pfTablesAddrBytesInBlock	    Counter64,
1042    pfTablesAddrBytesOutPass	    Counter64,
1043    pfTablesAddrBytesOutBlock	    Counter64,
1044    pfTablesAddrPktsInPass	    Counter64,
1045    pfTablesAddrPktsInBlock	    Counter64,
1046    pfTablesAddrPktsOutPass	    Counter64,
1047    pfTablesAddrPktsOutBlock	    Counter64
1048}
1049
1050pfTablesAddrIndex OBJECT-TYPE
1051    SYNTAX	Integer32 (1..2147483647)
1052    MAX-ACCESS  not-accessible
1053    STATUS	current
1054    DESCRIPTION
1055        "A unique value, greater than zero, for each address."
1056    ::= { pfTablesAddrEntry 1 }
1057
1058pfTablesAddrNetType OBJECT-TYPE
1059    SYNTAX	InetAddressType
1060    MAX-ACCESS	read-only
1061    STATUS	current
1062    DESCRIPTION
1063	"The type of address in the corresponding pfTablesAddrNet object."
1064    ::= { pfTablesAddrEntry 2 }
1065
1066pfTablesAddrNet OBJECT-TYPE
1067    SYNTAX	InetAddress
1068    MAX-ACCESS  read-only
1069    STATUS	current
1070    DESCRIPTION
1071        "The IP address of this particular table entry."
1072    ::= { pfTablesAddrEntry 3 }
1073
1074pfTablesAddrPrefix OBJECT-TYPE
1075    SYNTAX	InetAddressPrefixLength
1076    MAX-ACCESS  read-only
1077    STATUS	current
1078    DESCRIPTION
1079        "The CIDR netmask of this particular table entry."
1080    ::= { pfTablesAddrEntry 4 }
1081
1082pfTablesAddrTZero OBJECT-TYPE
1083    SYNTAX	TimeTicks
1084    UNITS	"1/100th of a Second"
1085    MAX-ACCESS  read-only
1086    STATUS	current
1087    DESCRIPTION
1088        "The time passed since this entry's statistics were last
1089	cleared, or the time passed since this entry was loaded
1090	into the table, whichever is sooner."
1091    ::= { pfTablesAddrEntry 5 }
1092
1093pfTablesAddrBytesInPass OBJECT-TYPE
1094    SYNTAX	Counter64
1095    MAX-ACCESS  read-only
1096    STATUS	current
1097    DESCRIPTION
1098        "The number of inbound bytes passed as a result of this entry."
1099    ::= { pfTablesAddrEntry 6 }
1100
1101pfTablesAddrBytesInBlock OBJECT-TYPE
1102    SYNTAX	Counter64
1103    MAX-ACCESS  read-only
1104    STATUS	current
1105    DESCRIPTION
1106        "The number of inbound bytes blocked as a result of this entry."
1107    ::= { pfTablesAddrEntry 7 }
1108
1109pfTablesAddrBytesOutPass OBJECT-TYPE
1110    SYNTAX	Counter64
1111    MAX-ACCESS  read-only
1112    STATUS	current
1113    DESCRIPTION
1114        "The number of outbound bytes passed as a result of this entry."
1115    ::= { pfTablesAddrEntry 8 }
1116
1117pfTablesAddrBytesOutBlock OBJECT-TYPE
1118    SYNTAX	Counter64
1119    MAX-ACCESS  read-only
1120    STATUS	current
1121    DESCRIPTION
1122        "The number of outbound bytes blocked as a result of this entry."
1123    ::= { pfTablesAddrEntry 9 }
1124
1125pfTablesAddrPktsInPass OBJECT-TYPE
1126    SYNTAX	Counter64
1127    MAX-ACCESS  read-only
1128    STATUS	current
1129    DESCRIPTION
1130        "The number of inbound packets passed as a result of this entry."
1131    ::= { pfTablesAddrEntry 10 }
1132
1133pfTablesAddrPktsInBlock OBJECT-TYPE
1134    SYNTAX	Counter64
1135    MAX-ACCESS  read-only
1136    STATUS	current
1137    DESCRIPTION
1138        "The number of inbound packets blocked as a result of this entry."
1139    ::= { pfTablesAddrEntry 11 }
1140
1141pfTablesAddrPktsOutPass OBJECT-TYPE
1142    SYNTAX	Counter64
1143    MAX-ACCESS  read-only
1144    STATUS	current
1145    DESCRIPTION
1146        "The number of outbound packets passed as a result of this entry."
1147    ::= { pfTablesAddrEntry 12 }
1148
1149pfTablesAddrPktsOutBlock OBJECT-TYPE
1150    SYNTAX	Counter64
1151    MAX-ACCESS  read-only
1152    STATUS	current
1153    DESCRIPTION
1154        "The number of outbound packets blocked as a result of this
1155        entry."
1156    ::= { pfTablesAddrEntry 13 }
1157
1158-- --------------------------------------------------------------------------
1159
1160--
1161-- Altq information
1162--
1163
1164pfAltqQueueNumber OBJECT-TYPE
1165    SYNTAX	Unsigned32
1166    MAX-ACCESS	read-only
1167    STATUS	current
1168    DESCRIPTION
1169	"The number of queues in the active set."
1170    ::= { pfAltq 1 }
1171
1172pfAltqQueueTable OBJECT-TYPE
1173    SYNTAX	SEQUENCE OF PfAltqQueueEntry
1174    MAX-ACCESS	not-accessible
1175    STATUS	current
1176    DESCRIPTION
1177	"Table containing the rules that are active on this system."
1178    ::= { pfAltq 2 }
1179
1180pfAltqQueueEntry OBJECT-TYPE
1181    SYNTAX	PfAltqQueueEntry
1182    MAX-ACCESS	not-accessible
1183    STATUS	current
1184    DESCRIPTION
1185	"An entry in the pfAltqQueueTable table."
1186    INDEX	{ pfAltqQueueIndex }
1187    ::= { pfAltqQueueTable 1 }
1188
1189PfAltqQueueEntry ::= SEQUENCE {
1190    pfAltqQueueIndex		    Integer32,
1191    pfAltqQueueDescr		    OCTET STRING,
1192    pfAltqQueueParent		    OCTET STRING,
1193    pfAltqQueueScheduler	    INTEGER,
1194    pfAltqQueueBandwidth	    Unsigned32,
1195    pfAltqQueuePriority		    Integer32,
1196    pfAltqQueueLimit		    Integer32
1197}
1198
1199pfAltqQueueIndex OBJECT-TYPE
1200    SYNTAX	Integer32 (1..2147483647)
1201    MAX-ACCESS	not-accessible
1202    STATUS	current
1203    DESCRIPTION
1204	"A unique value, greater than zero, for each queue."
1205    ::= { pfAltqQueueEntry 1 }
1206
1207pfAltqQueueDescr OBJECT-TYPE
1208    SYNTAX	OCTET STRING
1209    MAX-ACCESS	read-only
1210    STATUS	current
1211    DESCRIPTION
1212	"The name of the queue."
1213    ::= { pfAltqQueueEntry 2 }
1214
1215pfAltqQueueParent OBJECT-TYPE
1216    SYNTAX	OCTET STRING
1217    MAX-ACCESS	read-only
1218    STATUS	current
1219    DESCRIPTION
1220	"Name of the queue's parent if it has one."
1221    ::= { pfAltqQueueEntry 3 }
1222
1223pfAltqQueueScheduler OBJECT-TYPE
1224    SYNTAX	INTEGER { cbq(1), hfsc(8), priq(11) }
1225    MAX-ACCESS	read-only
1226    STATUS	current
1227    DESCRIPTION
1228	"Scheduler algorithm implemented by this queue."
1229    ::= { pfAltqQueueEntry 4 }
1230
1231pfAltqQueueBandwidth OBJECT-TYPE
1232    SYNTAX	Unsigned32
1233    MAX-ACCESS	read-only
1234    STATUS	current
1235    DESCRIPTION
1236	"Bandwitch assigned to this queue."
1237    ::= { pfAltqQueueEntry 5 }
1238
1239pfAltqQueuePriority OBJECT-TYPE
1240    SYNTAX	Integer32
1241    MAX-ACCESS	read-only
1242    STATUS	current
1243    DESCRIPTION
1244	"Priority level of the queue."
1245    ::= { pfAltqQueueEntry 6 }
1246
1247pfAltqQueueLimit OBJECT-TYPE
1248    SYNTAX	Integer32
1249    MAX-ACCESS	read-only
1250    STATUS	current
1251    DESCRIPTION
1252	"Maximum number of packets in the queue."
1253    ::= { pfAltqQueueEntry 7 }
1254
1255pfLabelsLblNumber OBJECT-TYPE
1256    SYNTAX	Integer32
1257    MAX-ACCESS	read-only
1258    STATUS	current
1259    DESCRIPTION
1260	"The number of labeled filter rules on this system."
1261    ::= { pfLabels 1 }
1262
1263pfLabelsLblTable OBJECT-TYPE
1264    SYNTAX	SEQUENCE OF PfLabelsLblEntry
1265    MAX-ACCESS	not-accessible
1266    STATUS	current
1267    DESCRIPTION
1268	"Table of filter rules, index on pfLabelsLblIndex."
1269    ::= { pfLabels 2 }
1270
1271pfLabelsLblEntry OBJECT-TYPE
1272    SYNTAX	PfLabelsLblEntry
1273    MAX-ACCESS	not-accessible
1274    STATUS	current
1275    DESCRIPTION
1276	"Any entry in the pfLabelsLblTable containing information
1277	about a particular filter rule on the system."
1278    INDEX	{ pfLabelsLblIndex }
1279    ::= { pfLabelsLblTable 1 }
1280
1281PfLabelsLblEntry ::= SEQUENCE {
1282    pfLabelsLblIndex		Integer32,
1283    pfLabelsLblName		OCTET STRING,
1284    pfLabelsLblEvals		Counter64,
1285    pfLabelsLblBytesIn		Counter64,
1286    pfLabelsLblBytesOut		Counter64,
1287    pfLabelsLblPktsIn		Counter64,
1288    pfLabelsLblPktsOut		Counter64
1289}
1290
1291pfLabelsLblIndex OBJECT-TYPE
1292    SYNTAX	Integer32 (1..2147483647)
1293    MAX-ACCESS	not-accessible
1294    STATUS	current
1295    DESCRIPTION
1296	"A unique value, greater than zero, for each label."
1297    ::= { pfLabelsLblEntry 1 }
1298
1299pfLabelsLblName OBJECT-TYPE
1300    SYNTAX	OCTET STRING
1301    MAX-ACCESS	read-only
1302    STATUS	current
1303    DESCRIPTION
1304	"The name of the rule label."
1305    ::= { pfLabelsLblEntry 2 }
1306
1307pfLabelsLblEvals OBJECT-TYPE
1308    SYNTAX	Counter64
1309    MAX-ACCESS	read-only
1310    STATUS	current
1311    DESCRIPTION
1312	"The number of rule evaluations."
1313    ::= { pfLabelsLblEntry 3 }
1314
1315pfLabelsLblBytesIn OBJECT-TYPE
1316    SYNTAX	Counter64
1317    MAX-ACCESS	read-only
1318    STATUS	current
1319    DESCRIPTION
1320	"The number of incoming bytes matched by the rule."
1321    ::= { pfLabelsLblEntry 4 }
1322
1323pfLabelsLblBytesOut OBJECT-TYPE
1324    SYNTAX	Counter64
1325    MAX-ACCESS	read-only
1326    STATUS	current
1327    DESCRIPTION
1328	"The number of outgoing bytes matched by the rule."
1329    ::= { pfLabelsLblEntry 5 }
1330
1331pfLabelsLblPktsIn OBJECT-TYPE
1332    SYNTAX	Counter64
1333    MAX-ACCESS	read-only
1334    STATUS	current
1335    DESCRIPTION
1336	"The number of incoming packets matched by the rule."
1337    ::= { pfLabelsLblEntry 6 }
1338
1339pfLabelsLblPktsOut OBJECT-TYPE
1340    SYNTAX	Counter64
1341    MAX-ACCESS	read-only
1342    STATUS	current
1343    DESCRIPTION
1344	"The number of outgoing packets matched by the rule."
1345    ::= { pfLabelsLblEntry 7 }
1346
1347END
1348