From owner-freebsd-pf@FreeBSD.ORG Thu Oct 1 13:35:31 2009 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id CA3EC1065695 for ; Thu, 1 Oct 2009 13:35:31 +0000 (UTC) (envelope-from shteryana@gmail.com) Received: from mail-ew0-f208.google.com (mail-ew0-f208.google.com [209.85.219.208]) by mx1.freebsd.org (Postfix) with ESMTP id 61AD18FC1A for ; Thu, 1 Oct 2009 13:35:30 +0000 (UTC) Received: by ewy4 with SMTP id 4so163838ewy.7 for ; Thu, 01 Oct 2009 06:35:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type; bh=bR80Gkh0N88cziCLTZA210zyfSyZfFTgtwpgYWzaqS8=; b=t9JoCtzT6qF4libvNLR0/XgY410jUdEUrJDRq23NWi1qYA9nC7WgbDIG6t4zEu1fBZ h6W/2tBz3T8d6Rk0r0OhYjeBS/UkeraPoV/h7toeu122fvAGS8D1ye7a7djpGhqifEoi ONj4XGa22/6Bm2jcJ9t5NBOVs/yQsNVOBweTA= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=bJOW/XGrxPSm8XrhyjwzNNKrb7J5qtbOnE5itSmxzmMvs/59HY+cHOiLVRgGnzWDgg cQANyDwDloPRhfzVGoelNjStyhlGBY8GTSzQhSKiNx+WdFcJde0Q24O9cd6fKevzkrBq pZ1H5lNlTRTzw5+XeAwbOqQrY+ime+InJDcQA= MIME-Version: 1.0 Received: by 10.211.147.26 with SMTP id z26mr7649494ebn.73.1254402365237; Thu, 01 Oct 2009 06:06:05 -0700 (PDT) In-Reply-To: <4AC4891C.4090403@killfile.pl> References: <20091001070641.GA78518@mail.media4u.pl> <4b4a8f2b0910010245u2a02b1c9nae6e5645f583f2cd@mail.gmail.com> <4AC4891C.4090403@killfile.pl> Date: Thu, 1 Oct 2009 16:06:05 +0300 Message-ID: <61b573980910010606o575eb28cu7b28ba01992cbdcd@mail.gmail.com> From: Shteryana Shopova To: Maciej Wierzbicki Content-Type: text/plain; charset=UTF-8 Cc: freebsd-pf@freebsd.org Subject: Re: [FreeBSD 7.2] snmp_pf.so X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Oct 2009 13:35:31 -0000 Hi, 2009/10/1 Maciej Wierzbicki : > Ondoy wrote on 2009-10-01 11:45: > >> without specifying OID, it only walks the mib-2 subtree. >> try >> # bsnmpwalk fokus >> the objects under 1.3.6.1.4.1.12325.1.200 are the pf stuff. > > Indeed, thanks. > > But then I have another question. bsnmpwalk parses some of pf oids and then > returns an error: > Agent localhost:snmp returned error > 1.3.6.1.4.1.12325.1.200.1.9.2.1.20.1 caused error - General error > bsnmpwalk -i /usr/share/snmp/defs/pf_tree.def begemotPf By default only the mibII_tree.def and tree.def OID to strings are parsed - you have to tell bsnmpwalk to parse the begemotPf OIDs explicitly . > Its pfTablesTblPktsOutXPass in pfTables, I believe. That error is a known > issue or I am missing something again? > http://people.freebsd.org/~syrinx/snmp/pf_snmp.c-01102009-01.diff - this should fix the error. > PS also, is it possible to count traffic on interface using snmp per ip > address bound to it (not per whole interface)? Hm, I think this should be supposedly done by fetching pfTablesAddrTable, but currently it does not return any data...I am not sure when I will have time to look at this, but of course everyone is more than wellcome to submit a patch :) > PPS maybe I should address this discussion to freebsd-net instead? > -- cheers, Shteryana