Hi,

On OpenBSD 6.3/amd64, I'm using snmpd(8) to gather pf(4) statistics.
It seems that some stats are not coherent.

For example, on egress and vio0 interfaces.
Asking snmpd(8), I get :
OPENBSD-PF-MIB::pfIfDescr.3 = STRING: "egress"
OPENBSD-PF-MIB::pfIfDescr.12 = STRING: "vio0"
OPENBSD-PF-MIB::pfIfType.3 = INTEGER: group(0)
OPENBSD-PF-MIB::pfIfType.12 = INTEGER: instance(1)
OPENBSD-PF-MIB::pfIfRules.3 = Gauge32: 12
OPENBSD-PF-MIB::pfIfRules.12 = Gauge32: 1
Asking pfctl(8), I get :
# pfctl -s rules | grep -c egress
8
# pfctl -s rules | grep -c vio0
0

According to the MIB, pfIfRules is "The number of rules which reference the interface."

Am I wrong expecting the numbers should be the same ?

Thank you.

Reply via email to