SNMP MIB Search

A conceptual row in the cnfCIInterfaceEntry.

A conceptual row in the cnfCICacheEntry.

A conceptual row in the cnfEIExportInfoEntry.

Maximum number of entries allowed in the cnfEICollectorTable
for each cache type.
A zero indicates export is not supported in the device.
The agent should set this value during initialization, and
the value for this object cannot be changed during the
system's operation.

A conceptual row in the cnfEICollectorEntry.

Indicates whether the netflow acceleration feature is enabled
on the device or not.
Feature acceleration is used to accelerate
a number of services, such as IP Accounting,
crypto encryption and decryption,
Policy-Based Routing, CASA, and RSVP.

Number of Feature Available Slot

Number of Feature Active Slot

A conceptual row in the cnfFeatureEntry.

Number of Sampled Packet.

Number of Bytes exported per second.

Number of flow statistics records which were exported.

Number of packets (udp datagrams) which were exported.

Number of times a flow record could not be exported because of
a pak allocation failure.

Number of export packets which were dropped at the time of
ipwrite operation. The reasons for this failure are no FIB,
adjacency failure, MTU failed, enqueue failed, IPC failed etc.

A string contain IP Packet Size Distribution statistics.
Distribution grouping are following :1-32   64   96  128
160  192  224  256 288  320  352 384  416  448  480  512
544  576 1024 1536 2048 2560 3072 3584 4096 4608. Value for
each group will be expressed in 2 bytes (in Network byte
order) and need to divide by 1000 to get the exact value
given by CLI using show ip cache flow command.

Object indicates time in millisecond since the last clearing
time of protocol statistics.

A conceptual row in the CnfPSProtocolStatEntry.

Object to indicate Sub- technologies in option template.

A conceptual row in the cnfTemplateEntry.

A conceptual row in the cnfTemplateExportInfoEntry.

Indicates the time when cnfTopFlowsTable was last updated.

Maximum number of top flows to calculate.
A value of 0 disables the Top Flows feature.

The number of entries currently available in cnfTopFlowsTable.

Total number of matching flows in the netflow cache.

Total number of flows in the netflow cache.

Indicates how the entries in cnfTopFLowsTable are to be sorted.
A value of 'noSort' disables Top Flows.

Top Flows Cache timeout. Top flows are cached for this length
of time and not recalculated. Configure a high value to ensure
the cache does not change during long queries.
Setting this object (to any value) will expire the cache.

A conceptual row in the cnfTopFlowsTable.

Source address type to match.
A value of 'unknown' (ie, 0) indicates the source address
is not used as a top flows match criteria, and clears the
cnfTopFlowsMatchSrcAddress and cnfTopFlowsMatchSrcAddressMask
configuration.

Source address prefix to match.

The length of the match source address prefix.
This prefix length must be consistent with the address type
specified in cnfTopFlowsMatchSrcAddressType. A length of zero
only matches the all-zero address of the specified type.

Destination address type to match.
A value of 'unknown' (ie, 0) indicates the destination address
is not used as a top flows match criteria, and clears the
cnfTopFlowsMatchDstAddress and cnfTopFlowsMatchDstAddressMask
configuration.

Destination address prefix to match.

The length of the match destination address prefix.
This prefix length must be consistent with the address type
specified in cnfTopFlowsMatchDstAddressType. A length of zero
only matches the all-zero address of the specified type.

Nexthop address type to match.
A value of 'unknown' (ie, 0) indicates the nexthop address
is not used as a top flows match criteria, and clears the
cnfTopFlowsMatchNhAddress and cnfTopFlowsMatchNhAddressMask
configuration.

Nexthop address prefix to match.

The length of the match nexthop address Prefix.
This prefix length must be consistent with the address type
specified in cnfTopFlowsMatchNhAddressType. A length of zero
only matches the all-zero address of the specified type.

The minimum value that the layer-4 source port number in
the flow must have in order to match.
A value of -1 disables this match criteria.

The maximum value that the layer-4 source port number in
the flow must have in order to match.
A value of -1 disables this match criteria.

The minimum value that the layer-4 destination port number in
the flow must have in order to match.
A value of -1 disables this match criteria.

The maximum value that the layer-4 destination port number in
the flow must have in order to match.
A value of -1 disables this match criteria.

Source AS number to match.
A value of -1 disables this match criteria.

Destination AS number to match.
A value of -1 disables this match criteria.

Input interface to match.
A value of 0 disables this match criteria.

Output interface to match.
A value of 0 disables this match criteria.

TOS byte to match.
A value of -1 disables this match criteria.

Protocol to match.
A value of -1 disables this match criteria.

Sampler name to match.
Leave blank to disable this match criteria.

Class name to match.
Leave blank to disable this match criteria.

Minimum packets to match.
A value of 0 disables this match criteria.

Maximum packets to match.
A value of 0 disables this match criteria.

Minimum bytes to match.
A value of 0 disables this match criteria.

Maximum bytes to match.
A value of 0 disables this match criteria.

Flow direction to match.
A value of 0 disables this match criteria.

A control variable used to generate the Top Flows.
When this object is set to 'true', the current
entries in cnfTopFlowsTable will be removed,
Top Flows will be recalculated and new entries
will be populated in cnfTopFlowsTable. Setting
this object to 'false' has no effect.
When read, this object always returns 'false'.

Indicates whether the Top Flows have been successfully
generated and entries in cnfTopFlowsTable are populated.

Indicates whether the netflow feature is enabled for this
interface, and if so, in which directions.

The type of netflow cache.
NetFlow aggregation maintains one or more extra flow caches
with different combinations of fields that determine
which traditional flows are grouped together.

Indicates whether netflow is enabled for this cache type.

The number of entries that can be cached for this cache type.
The accepted value could be limited based on the amount of
memory available in the system.

Number of currently active flow entries.

Number of available flow entries.

The timeout period (in minutes) for removing active flows
from the cache.

The timeout period (in seconds) for removing inactive flows
from the cache.

Source route's minimum configured mask bits. This is used to
configure the minimum mask for Router Based Aggregation
(RBA). Minimum masking capability is available only if RBA is
enabled. A value of 0 indicates that this object is not
applicable to this cache type.

Destination route's minimum configured mask bits. This is used
to configure the minimum mask for Router Based Aggregation
(RBA). Minimum masking capability is available only if RBA is
enabled. A value of 0 indicates that this object is not
applicable to this cache type.

The NetFlow data export version.

This object enables collection of AS numbers from a peer
autonomous system. cnfEIPeerAS, cnfEIOriginAS and
cnfEIBgpNextHop are interdependent.

This object enables collection of AS numbers from an origin
autonomous system. cnfEIPeerAS, cnfEIOriginAS and
cnfEIBgpNextHop are interdependent.

This object enables collection of BGP Next Hops. cnfEIPeerAS,
cnfEIOriginAS and cnfEIBgpNextHop are interdependent.

The type of Internet address used by this entry.

The Internet address of the collector. This is the
address which the Netflow data is exported to.

The transport port of the collector which the Netflow data is
exported to.

This object is used to create or delete an entry
in the cnfEICollectorTable.
* A row may be created using the 'CreateAndGo' option. When
the row is successfully created, the RowStatus would be
set to 'active' by the agent.
* A row may be deleted by setting the RowStatus to 'destroy'.

Unique ID to identify feature.

Feature acceleration slot number. A value of 255 indicates that
the feature has not occupied any valid feature acceleration
slot and is not being accelerated. Other values indicate which
feature acceleration slot the feature has occupied.

Number of flows currently using this feature acceleration slot
for acceleration.

Number of flows that have attached to this
feature acceleration slot.

Number of flows that have detached from this
feature acceleration slot.

Number of times this feature acceleration configuration
has changed.

This object is used as INDEX for protocol statistic table.
Protocol type consists of groups based on well known ports
and protocols.

Number of flows belonging to the same protocol and port
that were expired. This counter is incremented when a flow
expires due to some reason like time out of flows,
event based aging etc.

Number of Packets belonging to the same protocol and port
which were switched by netflow enabled interface(s).
This counter contains the number of Packets switched by all
netflow enabled line cards.

Number of Bytes belonging to the same protocol and port,
which were switched by netflow enabled interface(s).
This counter contains the number of Packets switched by all
netflow enabled line cards.

This is a summation of active time of all flows belonging to
the same protocol and port in milliseconds. The time between
first switched packet and last switched packet is measured as
the active time of a flow.

This is a summation of inactive time of all flows belonging to
the same protocol and port in milliseconds. The time between
the last switched packet and expiry of a flow is measured as
the inactive time of a flow.

Defines the structure and interpretation of fields in a data
record and serves as an INDEX in this table. Version 9 has two
types of Templates: Flow Templates and Option Templates.

Number of templates added.

Number of active templates.

Number of template ager polls.

Object to indicate whether version 9 export is configured
or not.

Export template time out.
Templates are resent after this time.

Export option time out.
Options are resent after this time.

Template refresh rate.
Templates are resent after this many packets.

Option refresh rate.
Options are resent after this many packets.

Index to select top flows.
A value of 1 selects the topmost flow.

Type of source address.

Source address.

Number of bits in source address mask.

Type of destination address.

Destination address.

Number of bits in destination address mask.

The type of nexthop address.

Nexthop address.

Source port number.

Destination port number.

Source AS number.

Destination AS number.

Input interface index.

Output interface index.

Time flow was first switched.

Time flow was last switched.

Type of service.

Protocol number.

TCP flags.

Netflow Sampler ID.

Netflow Class ID.

Flow flags.

Number of bytes in the flow.

Number of packets in the flow.

The VLAN-ID of this flow.

This table provides Netflow Enable information per interface.

A table containing configuration and statistics per cache.
Cache may be main cache or an aggregation cache.

A table containing information about export configuration per
cache type.

A control table to configure the collectors that the netflow
packets are exported to. The number of entries that can be
configured for the cache type is limited by the value of
cnfEIMaxCollectors.

This table provides statistical information about active
features. Each feature that can be accelerated will have an
entry in this table. Every row of this table indicates
statistics like name, number of active attachment, config
changes of a particular feature.

A table containing statistics per protocol.
Information sorted in this table is global in nature (i.e. it's
updated for all line cards where netflow is enabled) and
follows the Counter64 semantics as described in RFC 2578.

A control table to provide statistics of version 9
Flow and Option templates.

A control table providing information about version 9.

Table of flows which have accrued the highest packets or bytes.
Each row in the table represents one flow from the cache.

The Netflow MIB provides a simple and easy method
to get NetFlow cache information, current NetFlow
configuration and statistics. It will enable medium to
small size enterprises to take advantage of NetFlow
technology over SNMP at a reduced infrastructure cost.
The MIB is created to provide Netflow information in
these areas:
1. Cache information and configuration.
2. Export information and configuration.
3. Information about Feature Acceleration.
4. Export Statistics.
5. Protocol Statistics.
6. Version 9 Export Template information.
7. Top Flows information.
Terminology used
Flow
A flow is defined as an unidirectional sequence of
packets between a given source and destination
endpoints. Network flows are highly granular;
flow endpoints are identified both by IP address as
well as by transport layer application port numbers.
NetFlow also utilizes the IP Protocol type,
Type of Service (ToS) and the input interface
identifier to uniquely identify flows.
Exporter
A device (for example, a router) with NetFlow
services enabled. The exporter monitors packets
entering an observation point and creates flows out
of these packets. The information from these flows
are exported in the form of Flow Records to
the collector.
Flow Record
A Flow Record provides information about an IP Flow
that exists on the Exporter. The Flow Records are
commonly referred to as NetFlow Services data or
NetFlow data.
Collector
The NetFlow Collector receives Flow Records from
one or more Exporters. It processes the received
export packet, i.e. parses, stores the Flow Record
information. The flow records may be optionally
aggregated before storing into the hard disk.
Template
NetFlow Version 9 Export format is template based.
Version 9 record format consists of a packet header
followed by at least one or more template or data
FlowSets. A template FlowSet (collection of one or more
template) provides a description of the fields that
will be present in future data FlowSets. Templates
provide an extensible design to the record format,
a feature that should allow future enhancements to
NetFlow services without requiring concurrent changes
to the basic flow-record format.
One additional record type is also a part of
Version 9 specification: an options template. Rather
than supplying information about IP flows, options are
used to supply meta-data about the NetFlow process
itself.
Top Flows.
This feature provides a mechanism which allows the
top N flows in the netflow cache to be viewed
in real time.
Criteria can be set to limit the feature to particular
flows of interest, which can aid in DoS detection.
Only the number of flows (TopN) and the sort criteria
(SortBy) need be set.
Top Flows is not intended as a mechanism for exporting
the entire netflow cache.
Egress flows.
This feature provides a mechanism to identify a flow
as either an ingress or an egress flow.

A collection of objects providing information and
configuration of the Netflow cache.

A collection of objects providing statistical information
of cache per protocol and port.

A collection of objects providing Export information.

A collection of objects providing Feature Acceleration
information and statistics.

A collection of objects providing statistical information
of Export.

A collection of objects providing information about export
version 9.

A collection of objects providing information for top
flows.

A collection of objects providing information for top
flows.

A collection of objects providing additional information
for Top Flows.

A collection of objects providing VLAN
information about the top flows.

A collection of objects providing the match criteria
control information for Top Flows.

A collection of objects providing the explicit control
of the way top flows are generated.