SNMP: _cisco-ipsec-flow-monitor.yaml (#20353)
Co-authored-by: ilyam8 <ilya@netdata.cloud>
Fotis Voutsas committed
May 28, 2025 at 15:53 UTC
febb08d0e636c8236cc09aac493a3d2c63e126ba
1 file changed
+69
-51
src/go/plugin/go.d/config/go.d/snmp.profiles/default/_cisco-ipsec-flow-monitor.yaml
+69
-51
@@ -6,33 +6,47 @@ metrics:
6
symbols:
7
- OID: 1.3.6.1.4.1.9.9.171.1.2.3.1.15
8
name: cikeTunLifeTime
9
- description: The negotiated lifetime of the IPsec Phase-1 IKE Tunnel in seconds.
9
+ description: The negotiated lifetime of the IPsec Phase-1 IKE Tunnel in seconds
10
+ family: Cisco/IPsec/Tunnels/Phase1/Lifetime
11
unit: "s"
12
- OID: 1.3.6.1.4.1.9.9.171.1.2.3.1.19
13
name: cikeTunInOctets
13
- description: The total number of octets received by this IPsec Phase-1 IKE Tunnel.
14
+ description: The total number of octets received by this IPsec Phase-1 IKE Tunnel
15
+ family: Cisco/IPsec/Tunnels/Phase1/Traffic
16
+ unit: "By"
17
+ - OID: 1.3.6.1.4.1.9.9.171.1.2.3.1.27
18
+ name: cikeTunOutOctets
19
+ description: The total number of octets sent by this IPsec Phase-1 IKE Tunnel
20
+ family: Cisco/IPsec/Tunnels/Phase1/Traffic
21
unit: "By"
22
- OID: 1.3.6.1.4.1.9.9.171.1.2.3.1.20
23
name: cikeTunInPkts
17
- description: The total number of packets received by this IPsec Phase-1 IKE Tunnel.
24
+ description: The total number of packets received by this IPsec Phase-1 IKE Tunnel
25
+ family: Cisco/IPsec/Tunnels/Phase1/Packets
26
unit: "{packet}"
27
- OID: 1.3.6.1.4.1.9.9.171.1.2.3.1.21
28
name: cikeTunInDropPkts
21
- description: The total number of packets dropped by this IPsec Phase-1 IKE Tunnel during receive processing.
22
- unit: "{packet}"
23
- - OID: 1.3.6.1.4.1.9.9.171.1.2.3.1.27
24
- name: cikeTunOutOctets
25
- description: The total number of octets sent by this IPsec Phase-1 IKE Tunnel.
26
- unit: "By"
29
+ description: The total number of packets dropped by this IPsec Phase-1 IKE Tunnel during receive processing
30
+ family: Cisco/IPsec/Tunnels/Phase1/Drops
31
+ unit: "{drop}"
32
- OID: 1.3.6.1.4.1.9.9.171.1.2.3.1.28
33
name: cikeTunOutPkts
29
- description: The total number of packets sent by this IPsec Phase-1 IKE Tunnel.
34
+ description: The total number of packets sent by this IPsec Phase-1 IKE Tunnel
35
+ family: Cisco/IPsec/Tunnels/Phase1/Packets
36
unit: "{packet}"
37
- OID: 1.3.6.1.4.1.9.9.171.1.2.3.1.29
38
name: cikeTunOutDropPkts
33
- description: The total number of packets dropped by this IPsec Phase-1 IKE Tunnel during send processing.
34
- unit: "{packet}"
35
- # TODO: Check out metric_tags with symbols having mappings and/or expressing states/statuses. Need to convert to metrics.
39
+ description: The total number of packets dropped by this IPsec Phase-1 IKE Tunnel during send processing
40
+ family: Cisco/IPsec/Tunnels/Phase1/Drops
41
+ unit: "{drop}"
42
+ - OID: 1.3.6.1.4.1.9.9.171.1.2.3.1.35
43
+ name: cikeTunStatus
44
+ description: The status of the IPsec Phase-1 IKE Tunnel
45
+ family: Cisco/IPsec/Tunnels/Phase1/Status
46
+ unit: "{status}"
47
+ mapping:
48
+ 1: active
49
+ 2: destroy
50
metric_tags:
51
- index: 1
52
tag: phase_1_tunnel_index
@@ -44,13 +58,13 @@ metrics:
58
symbol:
59
OID: 1.3.6.1.4.1.9.9.171.1.2.3.1.7
60
name: cikeTunRemoteValue
47
- - tag: tunnel_status
61
+ - tag: tunnel_alive
62
symbol:
49
- OID: 1.3.6.1.4.1.9.9.171.1.2.3.1.35
50
- name: cikeTunStatus
63
+ OID: 1.3.6.1.4.1.9.9.171.1.3.2.1.3
64
+ name: cipSecTunIkeTunnelAlive
65
mapping:
52
- 1: active
53
- 2: destroy
66
+ 1: true
67
+ 2: false
68
- MIB: CISCO-IPSEC-FLOW-MONITOR-MIB
69
table:
70
name: cipSecTunnelTable
@@ -59,48 +73,66 @@ metrics:
73
- OID: 1.3.6.1.4.1.9.9.171.1.3.2.1.9
74
name: cipSecTunLifeTime
75
description: The negotiated lifetime of the IPsec Phase-2 Tunnel in seconds.
76
+ family: Cisco/IPsec/Tunnels/Phase2/Lifetime
77
unit: "s"
78
- OID: 1.3.6.1.4.1.9.9.171.1.3.2.1.26
79
name: cipSecTunInOctets
65
- description: The total number of octets received by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed.
80
+ description: The total number of octets received by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed
81
+ family: Cisco/IPsec/Tunnels/Phase2/Traffic
82
unit: "By"
83
- OID: 1.3.6.1.4.1.9.9.171.1.3.2.1.27
84
name: cipSecTunHcInOctets
69
- description: A high capacity count of the total number of octets received by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed.
85
+ description: A high capacity count of the total number of octets received by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed
86
+ family: Cisco/IPsec/Tunnels/Phase2/Traffic
87
unit: "By"
88
- OID: 1.3.6.1.4.1.9.9.171.1.3.2.1.32
89
name: cipSecTunInPkts
73
- description: The total number of packets received by this IPsec Phase-2 Tunnel.
90
+ description: The total number of packets received by this IPsec Phase-2 Tunnel
91
+ family: Cisco/IPsec/Tunnels/Phase2/Packets
92
unit: "{packet}"
93
- OID: 1.3.6.1.4.1.9.9.171.1.3.2.1.36
94
name: cipSecTunInAuthFails
77
- description: The total number of inbound authentication's which ended in failure by this IPsec Phase-2 Tunnel .
78
- unit: "{authentication_failure}"
95
+ description: The total number of inbound authentications which ended in failure by this IPsec Phase-2 Tunnel
96
+ family: Cisco/IPsec/Tunnels/Phase2/Errors
97
+ unit: "{failure}"
98
+ - OID: 1.3.6.1.4.1.9.9.171.1.3.2.1.48
99
+ name: cipSecTunOutAuthFails
100
+ description: The total number of outbound authentications which ended in failure by this IPsec Phase-2 Tunnel.
101
+ family: Cisco/IPsec/Tunnels/Phase2/Errors
102
+ unit: "{failure}"
103
- OID: 1.3.6.1.4.1.9.9.171.1.3.2.1.38
104
name: cipSecTunInDecryptFails
81
- description: The total number of inbound decryption's which ended in failure by this IPsec Phase-2 Tunnel.
82
- unit: "{decryption_failure}"
105
+ description: The total number of inbound decryptions which ended in failure by this IPsec Phase-2 Tunnel.
106
+ family: Cisco/IPsec/Tunnels/Phase2/Errors
107
+ unit: "{failure}"
108
+ - OID: 1.3.6.1.4.1.9.9.171.1.3.2.1.50
109
+ name: cipSecTunOutEncryptFails
110
+ description: The total number of outbound encryptions which ended in failure by this IPsec Phase-2 Tunnel.
111
+ family: Cisco/IPsec/Tunnels/Phase2/Errors
112
+ unit: "{failure}"
113
- OID: 1.3.6.1.4.1.9.9.171.1.3.2.1.39
114
name: cipSecTunOutOctets
85
- description: The total number of octets sent by this IPsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed.
115
+ description: The total number of octets sent by this IPsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed
116
+ family: Cisco/IPsec/Tunnels/Phase2/Traffic
117
unit: "By"
118
- OID: 1.3.6.1.4.1.9.9.171.1.3.2.1.40
119
name: cipSecTunHcOutOctets
89
- description: A high capacity count of the total number of octets sent by this IPsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed.
120
+ description: A high capacity count of the total number of octets sent by this IPsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed
121
+ family: Cisco/IPsec/Tunnels/Phase2/Traffic
122
unit: "By"
123
- OID: 1.3.6.1.4.1.9.9.171.1.3.2.1.45
124
name: cipSecTunOutPkts
93
- description: The total number of packets sent by this IPsec Phase-2 Tunnel.
125
+ description: The total number of packets sent by this IPsec Phase-2 Tunnel
126
+ family: Cisco/IPsec/Tunnels/Phase2/Packets
127
unit: "{packet}"
95
- - OID: 1.3.6.1.4.1.9.9.171.1.3.2.1.48
96
- name: cipSecTunOutAuthFails
97
- description: The total number of outbound authentication's which ended in failure by this IPsec Phase-2 Tunnel.
98
- unit: "{authentication_failure}"
99
- - OID: 1.3.6.1.4.1.9.9.171.1.3.2.1.50
100
- name: cipSecTunOutEncryptFails
101
- description: The total number of outbound encryption's which ended in failure by this IPsec Phase-2 Tunnel.
102
- unit: "{encryption_failure}"
103
- # TODO: Check out metric_tags with symbols having mappings and/or expressing states/statuses. Need to convert to metrics.
128
+ - OID: 1.3.6.1.4.1.9.9.171.1.3.2.1.51
129
+ name: cipSecTunStatus
130
+ description: The status of the IPsec Phase-2 Tunnel
131
+ family: Cisco/IPsec/Tunnels/Phase2/Status
132
+ unit: "{status}"
133
+ mapping:
134
+ 1: active
135
+ 2: destroy
136
metric_tags:
137
- index: 1
138
tag: phase_2_tunnel_index
@@ -108,13 +140,6 @@ metrics:
140
symbol:
141
OID: 1.3.6.1.4.1.9.9.171.1.3.2.1.2
142
name: cipSecTunIkeTunnelIndex
111
- - tag: tunnel_alive
112
- symbol:
113
- OID: 1.3.6.1.4.1.9.9.171.1.3.2.1.3
114
- name: cipSecTunIkeTunnelAlive
115
- mapping:
116
- 1: true
117
- 2: false
143
- tag: peer_local_address
144
symbol:
145
OID: 1.3.6.1.4.1.9.9.171.1.3.2.1.4
@@ -123,10 +148,3 @@ metrics:
148
symbol:
149
OID: 1.3.6.1.4.1.9.9.171.1.3.2.1.5
150
name: cipSecTunRemoteAddr
126
- - tag: tunnel_status
127
- symbol:
128
- OID: 1.3.6.1.4.1.9.9.171.1.3.2.1.51
129
- name: cipSecTunStatus
130
- mapping:
131
- 1: active
132
- 2: destroy