All MIBs › CISCO-NETFLOW-MIB
Organization: Cisco Systems, Inc.
Last Updated: 2006-04-27
Category: Cisco Devices, Network Monitoring (RMON)
Description: Manages NetFlow cache configuration and export settings, providing traffic flow statistics organized by protocol and port.
IPNetwork Monitor uses several OIDs from this MIB in network discovery and polling the applicable devices. Start monitoring CISCO-NETFLOW-MIB with a free 30-day trial of IPNetwork Monitor.
What Is CISCO-NETFLOW-MIB?
CISCO-NETFLOW-MIB provides SNMP access to NetFlow cache configuration, export settings, and traffic-flow statistics on Cisco routers and switches, letting smaller organizations use NetFlow traffic accounting without a full flow-collector infrastructure. It exposes categories of data including per-interface NetFlow enablement, cache type/configuration, active and inactive flow counts, and flow timeout settings, alongside export configuration and statistics. From a monitoring standpoint it is primarily a traffic/performance-visibility MIB rather than a hardware-health one — cnfCIActiveFlows, cnfCIInactiveFlows, and cnfCICacheEntries reveal whether the flow cache is healthy or nearing capacity (which can affect flow-accounting accuracy), and cnfCINetflowEnable/cnfCIMcastNetflowEnable confirm the feature is actually turned on where expected. It relies on the underlying NetFlow export protocol and typically complements interface (ifTable) and export-destination configuration to fully characterize traffic flows. It is commonly deployed on Cisco routers/switches used for traffic accounting, billing, or security/anomaly analysis. Network engineers configuring cisco netflow monitoring use this MIB to pull NetFlow cache and template information directly over SNMP rather than only via the flow-collector protocol.
IPNetwork Monitor allows you to monitor SNMP objects defined in CISCO-NETFLOW-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Cisco routers and switches
Monitoring Examples
An operator would poll cnfCIInterfaceTable/cnfCIInterfaceEntry to confirm cnfCINetflowEnable is set on the interfaces expected to be flow-monitored, then check cnfCICacheTable/cnfCICacheEntry for cnfCICacheType and cnfCICacheEnable to verify the cache is active. Watching cnfCIActiveFlows and cnfCIInactiveFlows against cnfCICacheEntries capacity flags a cache nearing exhaustion, which would cause dropped or aged-out flow records. cnfCIActiveTimeOut tuning affects how quickly long-lived flows are exported, which matters for accurate near-real-time traffic reporting.
What Can Be Monitored
- per-interface NetFlow enablement
- cache type and enablement
- active and inactive flow counts
- cache capacity/entries
- active flow timeout setting
This MIB depends on
Related MIBs
Imported Objects
From CISCO-SMI
| ciscoMgmt | OBJECT-IDENTITY |
From IF-MIB
| InterfaceIndex | |
| InterfaceIndexOrZero | |
| ifIndex | OBJECT-TYPE |
From INET-ADDRESS-MIB
| InetAddress | |
| InetAddressPrefixLength | |
| InetAddressType | |
| InetAutonomousSystemNumber | |
| InetPortNumber |
From Q-BRIDGE-MIB
| VlanIndex |
From SNMPv2-CONF
| MODULE-COMPLIANCE | |
| OBJECT-GROUP |
From SNMPv2-SMI
| Counter32 | |
| Counter64 | |
| Gauge32 | |
| Integer32 | |
| MODULE-IDENTITY | |
| OBJECT-TYPE | |
| Unsigned32 |
From SNMPv2-TC
| DisplayString | |
| RowStatus | |
| TEXTUAL-CONVENTION | |
| TimeStamp | |
| TruthValue |
How to Use in IPNetwork Monitor
Example using cnfESSampledPacket OID:
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| ciscoNetflowMIB | 1.3.6.1.4.1.9.9.387 | The Netflow MIB provides a simple and easy method to get NetFlow cache information, current NetFlow configuration and statistics. It will enable medium to small size enterprises to take advantage of NetFlow technology over SNMP at a reduced infrastructure cost. The MIB is created to provide Netflow information in these areas: 1. Cache information and configuration. 2. Export information and configuration. 4. Export Statistics. 5. Protocol Statistics. 6. Version 9 Export Template information. 7. Top Flows information. Terminology used Flow A flow is defined as an unidirectional sequence of packets between a given source and destination endpoints. Network flows are highly granular; flow endpoints are identified both by IP address as well as by transport layer application port numbers. NetFlow also utilizes the IP Protocol type, Type of Service (ToS) and the input interface identifier to uniquely identify flows. Exporter A device (for example, a router) with NetFlow services enabled. The exporter monitors packets entering an observation point and creates flows out of these packets. The information from these flows are exported in the form of Flow Records to the collector. Flow Record A Flow Record provides information about an IP Flow that exists on the Exporter. The Flow Records are commonly referred to as NetFlow Services data or NetFlow data. Collector The NetFlow Collector receives Flow Records from one or more Exporters. It processes the received export packet, i.e. parses, stores the Flow Record information. The flow records may be optionally aggregated before storing into the hard disk. Template NetFlow Version 9 Export format is template based. Version 9 record format consists of a packet header followed by at least one or more template or data FlowSets. A template FlowSet (collection of one or more template) provides a description of the fields that will be present in future data FlowSets. Templates provide an extensible design to the record format, a feature that should allow future enhancements to NetFlow services without requiring concurrent changes to the basic flow-record format. One additional record type is also a part of Version 9 specification: an options template. Rather than supplying information about IP flows, options are used to supply meta-data about the NetFlow process itself. Top Flows. This feature provides a mechanism which allows the top N flows in the netflow cache to be viewed in real time. Criteria can be set to limit the feature to particular flows of interest, which can aid in DoS detection. Only the number of flows (TopN) and the sort criteria (SortBy) need be set. Top Flows is not intended as a mechanism for exporting the entire netflow cache. Egress flows. This feature provides a mechanism to identify a flow as either an ingress or an egress flow. | ||
| ciscoNetflowMIBConform | 1.3.6.1.4.1.9.9.387.2 | |||
| ciscoNetflowMIBNotifs | 1.3.6.1.4.1.9.9.387.0 | |||
| ciscoNetflowMIBObjects | 1.3.6.1.4.1.9.9.387.1 | |||
| cnfBridgedFlowStatsCtrlGroup | 1.3.6.1.4.1.9.9.387.2.2.14 | A collection of objects providing the control of bridged flow statistics per vlan. | ||
| cnfCacheInfo | 1.3.6.1.4.1.9.9.387.1.1 | |||
| cnfCacheInfoGroup | 1.3.6.1.4.1.9.9.387.2.2.1 | A collection of objects providing information and configuration of the Netflow cache. | ||
| U32 cnfCIActiveFlows | 1.3.6.1.4.1.9.9.387.1.1.2.1.4 | Unsigned32 | read-only | Number of currently active flow entries. |
| U32 cnfCIActiveTimeOut | 1.3.6.1.4.1.9.9.387.1.1.2.1.6 | Unsigned32 | read-write | The timeout period (in minutes) for removing active flows from the cache. |
| T/F cnfCIBridgedFlowStatsCrtEnable | 1.3.6.1.4.1.9.9.387.1.1.3.1.2 | TruthValue | read-write | Indicates whether the bridged flow creation is enabled for this vlan. |
| cnfCIBridgedFlowStatsCtrlEntry | 1.3.6.1.4.1.9.9.387.1.1.3.1 | not-accessible | A conceptual row in the cnfCIBridgedFlowStatsCtrlTable, containing the configuration of bridged flow statistics per vlan. When a vlan is created in a device supporting this table, a corresponding entry will be added to this table. | |
| cnfCIBridgedFlowStatsCtrlTable | 1.3.6.1.4.1.9.9.387.1.1.3 | not-accessible | This table controls the reporting of bridged flow statistics per vlan. | |
| T/F cnfCIBridgedFlowStatsExpEnable | 1.3.6.1.4.1.9.9.387.1.1.3.1.3 | TruthValue | read-write | Indicates whether the export of bridged flow statistics is enabled for this vlan. |
| VLA cnfCIBridgedFlowVlan | 1.3.6.1.4.1.9.9.387.1.1.3.1.1 | VlanIndex | not-accessible | Indicates the Vlan number on which the reporting of bridged flow statistics is configured. |
| T/F cnfCICacheEnable | 1.3.6.1.4.1.9.9.387.1.1.2.1.2 | TruthValue | read-write | Indicates whether netflow is enabled for this cache type. |
| U32 cnfCICacheEntries | 1.3.6.1.4.1.9.9.387.1.1.2.1.3 | Unsigned32 | read-write | The number of entries that can be cached for this cache type. The accepted value could be limited based on the amount of memory available in the system. |
| cnfCICacheEntry | 1.3.6.1.4.1.9.9.387.1.1.2.1 | not-accessible | A conceptual row in the cnfCICacheEntry. | |
| cnfCICacheTable | 1.3.6.1.4.1.9.9.387.1.1.2 | not-accessible | A table containing configuration and statistics per cache. Cache may be main cache or an aggregation cache. | |
| NFC cnfCICacheType | 1.3.6.1.4.1.9.9.387.1.1.2.1.1 | NfCacheTypes | not-accessible | The type of netflow cache. NetFlow aggregation maintains one or more extra flow caches with different combinations of fields that determine which traditional flows are grouped together. |
| U32 cnfCIInactiveFlows | 1.3.6.1.4.1.9.9.387.1.1.2.1.5 | Unsigned32 | read-only | Number of available flow entries. |
| U32 cnfCIInactiveTimeOut | 1.3.6.1.4.1.9.9.387.1.1.2.1.7 | Unsigned32 | read-write | The timeout period (in seconds) for removing inactive flows from the cache. |
| cnfCIInterfaceEntry | 1.3.6.1.4.1.9.9.387.1.1.1.1 | not-accessible | A conceptual row in the cnfCIInterfaceEntry. | |
| cnfCIInterfaceTable | 1.3.6.1.4.1.9.9.387.1.1.1 | not-accessible | This table provides Netflow Enable information per interface. | |
| NUM cnfCIMcastNetflowEnable | 1.3.6.1.4.1.9.9.387.1.1.1.1.2 | NfInterfaceDirectionTypes | read-write | Indicates whether the multicast netflow accounting feature is enabled for this interface, and if so, in which directions. |
| T/F cnfCIMcastNetflowRPFFailedEnable | 1.3.6.1.4.1.9.9.387.1.1.4 | TruthValue | read-write | Indicates whether netflow accounting for multicast data that fails the reverse path forwarding (RPF) check is enabled. |
| ADR cnfCIMinDestinationMask | 1.3.6.1.4.1.9.9.387.1.1.2.1.9 | InetAddressPrefixLength | read-write | Destination route's minimum configured mask bits. This is used to configure the minimum mask for Router Based Aggregation (RBA). Minimum masking capability is available only if RBA is enabled. A value of 0 indicates that this object is not applicable to this cache type. |
| ADR cnfCIMinSourceMask | 1.3.6.1.4.1.9.9.387.1.1.2.1.8 | InetAddressPrefixLength | read-write | Source route's minimum configured mask bits. This is used to configure the minimum mask for Router Based Aggregation (RBA). Minimum masking capability is available only if RBA is enabled. A value of 0 indicates that this object is not applicable to this cache type. |
| NUM cnfCINetflowEnable | 1.3.6.1.4.1.9.9.387.1.1.1.1.1 | NfInterfaceDirectionTypes | read-write | Indicates whether the netflow feature is enabled for this interface, and if so, in which directions. |
| T/F cnfEIBgpNextHop | 1.3.6.1.4.1.9.9.387.1.2.1.1.4 | TruthValue | read-write | This object enables collection of BGP Next Hops. cnfEIPeerAS, cnfEIOriginAS and cnfEIBgpNextHop are interdependent. |
| IP cnfEICollectorAddress | 1.3.6.1.4.1.9.9.387.1.2.3.1.2 | InetAddress | not-accessible | The Internet address of the collector. This is the address which the Netflow data is exported to. |
| IPt cnfEICollectorAddressType | 1.3.6.1.4.1.9.9.387.1.2.3.1.1 | InetAddressType | not-accessible | The type of Internet address used by this entry. |
| cnfEICollectorEntry | 1.3.6.1.4.1.9.9.387.1.2.3.1 | not-accessible | A conceptual row in the cnfEICollectorEntry. | |
| INE cnfEICollectorPort | 1.3.6.1.4.1.9.9.387.1.2.3.1.3 | InetPortNumber | not-accessible | The transport port of the collector which the Netflow data is exported to. |
| ROW cnfEICollectorStatus | 1.3.6.1.4.1.9.9.387.1.2.3.1.4 | RowStatus | read-create | This object is used to create or delete an entry in the cnfEICollectorTable. * A row may be created using the 'CreateAndGo' option. When the row is successfully created, the RowStatus would be set to 'active' by the agent. * A row may be deleted by setting the RowStatus to 'destroy'. |
| cnfEICollectorTable | 1.3.6.1.4.1.9.9.387.1.2.3 | not-accessible | A control table to configure the collectors that the netflow packets are exported to. The number of entries that can be configured for the cache type is limited by the value of cnfEIMaxCollectors. | |
| cnfEIExportInfoEntry | 1.3.6.1.4.1.9.9.387.1.2.1.1 | not-accessible | A conceptual row in the cnfEIExportInfoEntry. | |
| cnfEIExportInfoTable | 1.3.6.1.4.1.9.9.387.1.2.1 | not-accessible | A table containing information about export configuration per cache type. | |
| U32 cnfEIExportVersion | 1.3.6.1.4.1.9.9.387.1.2.1.1.1 | Unsigned32 | read-write | The NetFlow data export version. |
| U32 cnfEIMaxCollectors | 1.3.6.1.4.1.9.9.387.1.2.2 | Unsigned32 | read-only | Maximum number of entries allowed in the cnfEICollectorTable for each cache type. A zero indicates export is not supported in the device. The agent should set this value during initialization, and the value for this object cannot be changed during the system's operation. |
| T/F cnfEIOriginAS | 1.3.6.1.4.1.9.9.387.1.2.1.1.3 | TruthValue | read-write | This object enables collection of AS numbers from an origin autonomous system. cnfEIPeerAS, cnfEIOriginAS and cnfEIBgpNextHop are interdependent. |
| T/F cnfEIPeerAS | 1.3.6.1.4.1.9.9.387.1.2.1.1.2 | TruthValue | read-write | This object enables collection of AS numbers from a peer autonomous system. cnfEIPeerAS, cnfEIOriginAS and cnfEIBgpNextHop are interdependent. |
| C32 cnfESExportRate | 1.3.6.1.4.1.9.9.387.1.4.2 | Counter32 | read-only | Number of Bytes exported per second. |
| C32 cnfESPktsDropped | 1.3.6.1.4.1.9.9.387.1.4.6 | Counter32 | read-only | Number of export packets which were dropped at the time of ipwrite operation. The reasons for this failure are no FIB, adjacency failure, MTU failed, enqueue failed, IPC failed etc. |
| C32 cnfESPktsExported | 1.3.6.1.4.1.9.9.387.1.4.4 | Counter32 | read-only | Number of packets (udp datagrams) which were exported. |
| C32 cnfESPktsFailed | 1.3.6.1.4.1.9.9.387.1.4.5 | Counter32 | read-only | Number of times a flow record could not be exported because of a pak allocation failure. |
| C32 cnfESRecordsExported | 1.3.6.1.4.1.9.9.387.1.4.3 | Counter32 | read-only | Number of flow statistics records which were exported. |
| C32 cnfESSampledPacketEx | 1.3.6.1.4.1.9.9.387.1.4.1 | Counter32 | read-only | Number of Sampled Packet. |
| cnfExportInfo | 1.3.6.1.4.1.9.9.387.1.2 | |||
| cnfExportInfoGroup | 1.3.6.1.4.1.9.9.387.2.2.3 | A collection of objects providing Export information. | ||
| cnfExportStatistics | 1.3.6.1.4.1.9.9.387.1.4 | |||
| cnfExportStatisticsGroup | 1.3.6.1.4.1.9.9.387.2.2.5 | A collection of objects providing statistical information of Export. | ||
| cnfExportTemplate | 1.3.6.1.4.1.9.9.387.1.6 | |||
| cnfExportTemplateGroup | 1.3.6.1.4.1.9.9.387.2.2.6 | A collection of objects providing information about export version 9. | ||
| cnfMcastNetflowControlGroup | 1.3.6.1.4.1.9.9.387.2.2.13 | A collection of objects providing the control of multicast netflow. | ||
| cnfMIBCompliance | 1.3.6.1.4.1.9.9.387.2.1.1 | The compliance statement for the CISCO-NETFLOW-MIB. OBJECT cnfCollectorAddressType SYNTAX InetAddressType { ipv4(1) } DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfCollectorAddress SYNTAX InetAddress (SIZE(4)) DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsSrcAddressType SYNTAX InetAddressType { ipv4(1) } DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsSrcAddress SYNTAX InetAddress (SIZE(4)) DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsDstAddressType SYNTAX InetAddressType { ipv4(1) } DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsDstAddress SYNTAX InetAddress (SIZE(4)) DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsNhAddressType SYNTAX InetAddressType { ipv4(1) } DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsNhAddress SYNTAX InetAddress (SIZE(4)) DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsMatchSrcAddressType SYNTAX InetAddressType { ipv4(1) } DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsMatchSrcAddress SYNTAX InetAddress (SIZE(4)) DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsMatchDstAddressType SYNTAX InetAddressType { ipv4(1) } DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsMatchDstAddress SYNTAX InetAddress (SIZE(4)) DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsMatchNhAddressType SYNTAX InetAddressType { ipv4(1) } DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsMatchNhAddress SYNTAX InetAddress (SIZE(4)) DESCRIPTION An implementation is only required to support IPv4 addresses. | ||
| cnfMIBCompliance1 | 1.3.6.1.4.1.9.9.387.2.1.2 | The compliance statement for the CISCO-NETFLOW-MIB. OBJECT cnfCollectorAddressType SYNTAX InetAddressType { ipv4(1) } DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfCollectorAddress SYNTAX InetAddress (SIZE(4)) DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsSrcAddressType SYNTAX InetAddressType { ipv4(1) } DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsSrcAddress SYNTAX InetAddress (SIZE(4)) DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsDstAddressType SYNTAX InetAddressType { ipv4(1) } DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsDstAddress SYNTAX InetAddress (SIZE(4)) DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsNhAddressType SYNTAX InetAddressType { ipv4(1) } DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsNhAddress SYNTAX InetAddress (SIZE(4)) DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsMatchSrcAddressType SYNTAX InetAddressType { ipv4(1) } DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsMatchSrcAddress SYNTAX InetAddress (SIZE(4)) DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsMatchDstAddressType SYNTAX InetAddressType { ipv4(1) } DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsMatchDstAddress SYNTAX InetAddress (SIZE(4)) DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsMatchNhAddressType SYNTAX InetAddressType { ipv4(1) } DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsMatchNhAddress SYNTAX InetAddress (SIZE(4)) DESCRIPTION An implementation is only required to support IPv4 addresses. | ||
| cnfMIBCompliance2 | 1.3.6.1.4.1.9.9.387.2.1.3 | The compliance statement for the CISCO-NETFLOW-MIB. OBJECT cnfCollectorAddressType SYNTAX InetAddressType { ipv4(1) } DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfCollectorAddress SYNTAX InetAddress (SIZE(4)) DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsSrcAddressType SYNTAX InetAddressType { ipv4(1) } DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsSrcAddress SYNTAX InetAddress (SIZE(4)) DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsDstAddressType SYNTAX InetAddressType { ipv4(1) } DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsDstAddress SYNTAX InetAddress (SIZE(4)) DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsNhAddressType SYNTAX InetAddressType { ipv4(1) } DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsNhAddress SYNTAX InetAddress (SIZE(4)) DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsMatchSrcAddressType SYNTAX InetAddressType { ipv4(1) } DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsMatchSrcAddress SYNTAX InetAddress (SIZE(4)) DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsMatchDstAddressType SYNTAX InetAddressType { ipv4(1) } DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsMatchDstAddress SYNTAX InetAddress (SIZE(4)) DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsMatchNhAddressType SYNTAX InetAddressType { ipv4(1) } DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsMatchNhAddress SYNTAX InetAddress (SIZE(4)) DESCRIPTION An implementation is only required to support IPv4 addresses. | ||
| cnfMIBCompliance3 | 1.3.6.1.4.1.9.9.387.2.1.4 | The compliance statement for the CISCO-NETFLOW-MIB. OBJECT cnfCollectorAddressType SYNTAX InetAddressType { ipv4(1) } DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfCollectorAddress SYNTAX InetAddress (SIZE(4)) DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsSrcAddressType SYNTAX InetAddressType { ipv4(1) } DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsSrcAddress SYNTAX InetAddress (SIZE(4)) DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsDstAddressType SYNTAX InetAddressType { ipv4(1) } DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsDstAddress SYNTAX InetAddress (SIZE(4)) DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsNhAddressType SYNTAX InetAddressType { ipv4(1) } DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsNhAddress SYNTAX InetAddress (SIZE(4)) DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsMatchSrcAddressType SYNTAX InetAddressType { ipv4(1) } DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsMatchSrcAddress SYNTAX InetAddress (SIZE(4)) DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsMatchDstAddressType SYNTAX InetAddressType { ipv4(1) } DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsMatchDstAddress SYNTAX InetAddress (SIZE(4)) DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsMatchNhAddressType SYNTAX InetAddressType { ipv4(1) } DESCRIPTION An implementation is only required to support IPv4 addresses. OBJECT cnfTopFlowsMatchNhAddress SYNTAX InetAddress (SIZE(4)) DESCRIPTION An implementation is only required to support IPv4 addresses. | ||
| cnfMIBCompliances | 1.3.6.1.4.1.9.9.387.2.1 | |||
| cnfMIBGroups | 1.3.6.1.4.1.9.9.387.2.2 | |||
| cnfProtocolStatGroup | 1.3.6.1.4.1.9.9.387.2.2.2 | A collection of objects providing statistical information of cache per protocol and port. | ||
| cnfProtocolStatistics | 1.3.6.1.4.1.9.9.387.1.5 | |||
| C64 cnfPSActive | 1.3.6.1.4.1.9.9.387.1.5.3.1.5 | Counter64 | read-only | This is a summation of active time of all flows belonging to the same protocol and port in milliseconds. The time between first switched packet and last switched packet is measured as the active time of a flow. |
| C64 cnfPSBytes | 1.3.6.1.4.1.9.9.387.1.5.3.1.4 | Counter64 | read-only | Number of Bytes belonging to the same protocol and port, which were switched by netflow enabled interface(s). This counter contains the number of Packets switched by all netflow enabled line cards. |
| C64 cnfPSExpiredFlows | 1.3.6.1.4.1.9.9.387.1.5.3.1.2 | Counter64 | read-only | Number of flows belonging to the same protocol and port that were expired. This counter is incremented when a flow expires due to some reason like time out of flows, event based aging etc. |
| C64 cnfPSInactive | 1.3.6.1.4.1.9.9.387.1.5.3.1.6 | Counter64 | read-only | This is a summation of inactive time of all flows belonging to the same protocol and port in milliseconds. The time between the last switched packet and expiry of a flow is measured as the inactive time of a flow. |
| G32 cnfPSLastClearElapsedTime | 1.3.6.1.4.1.9.9.387.1.5.2 | Gauge32 | read-only | Object indicates time in millisecond since the last clearing time of protocol statistics. |
| C64 cnfPSPackets | 1.3.6.1.4.1.9.9.387.1.5.3.1.3 | Counter64 | read-only | Number of Packets belonging to the same protocol and port which were switched by netflow enabled interface(s). This counter contains the number of Packets switched by all netflow enabled line cards. |
| OCT cnfPSPacketSizeDistribution | 1.3.6.1.4.1.9.9.387.1.5.1 | OCTET STRING | read-only | A string contain IP Packet Size Distribution statistics. Distribution grouping are following :1-32 64 96 128 160 192 224 256 288 320 352 384 416 448 480 512 544 576 1024 1536 2048 2560 3072 3584 4096 4608. Value for each group will be expressed in 2 bytes (in Network byte order) and need to divide by 1000 to get the exact value given by CLI using show ip cache flow command. |
| cnfPSProtocolStatEntry | 1.3.6.1.4.1.9.9.387.1.5.3.1 | not-accessible | A conceptual row in the CnfPSProtocolStatEntry. | |
| cnfPSProtocolStatTable | 1.3.6.1.4.1.9.9.387.1.5.3 | not-accessible | A table containing statistics per protocol. Information sorted in this table is global in nature (i.e. it's updated for all line cards where netflow is enabled) and follows the Counter64 semantics as described in RFC 2578. | |
| NFP cnfPSProtocolType | 1.3.6.1.4.1.9.9.387.1.5.3.1.1 | NfProtocolTypes | not-accessible | This object is used as INDEX for protocol statistic table. Protocol type consists of groups based on well known ports and protocols. |
| U32 cnfTemplateActive | 1.3.6.1.4.1.9.9.387.1.6.2.1.3 | Unsigned32 | read-only | Number of active templates. |
| U32 cnfTemplateAdded | 1.3.6.1.4.1.9.9.387.1.6.2.1.2 | Unsigned32 | read-only | Number of templates added. |
| U32 cnfTemplateAgerPolls | 1.3.6.1.4.1.9.9.387.1.6.2.1.4 | Unsigned32 | read-only | Number of template ager polls. |
| cnfTemplateEntry | 1.3.6.1.4.1.9.9.387.1.6.2.1 | not-accessible | A conceptual row in the cnfTemplateEntry. | |
| cnfTemplateExportInfoEntry | 1.3.6.1.4.1.9.9.387.1.6.3.1 | not-accessible | A conceptual row in the cnfTemplateExportInfoEntry. | |
| cnfTemplateExportInfoTable | 1.3.6.1.4.1.9.9.387.1.6.3 | not-accessible | A control table providing information about version 9. | |
| T/F cnfTemplateExportVer9Enable | 1.3.6.1.4.1.9.9.387.1.6.3.1.1 | TruthValue | read-only | Object to indicate whether version 9 export is configured or not. |
| U32 cnfTemplateExportVer9OptRefreshRate | 1.3.6.1.4.1.9.9.387.1.6.3.1.5 | Unsigned32 | read-write | Option refresh rate. Options are resent after this many packets. |
| U32 cnfTemplateExportVer9OptTimeout | 1.3.6.1.4.1.9.9.387.1.6.3.1.3 | Unsigned32 | read-write | Export option time out. Options are resent after this time. |
| U32 cnfTemplateExportVer9TplRefreshRate | 1.3.6.1.4.1.9.9.387.1.6.3.1.4 | Unsigned32 | read-write | Template refresh rate. Templates are resent after this many packets. |
| U32 cnfTemplateExportVer9TplTimeout | 1.3.6.1.4.1.9.9.387.1.6.3.1.2 | Unsigned32 | read-write | Export template time out. Templates are resent after this time. |
| U32 cnfTemplateOptionsFlag | 1.3.6.1.4.1.9.9.387.1.6.1 | Unsigned32 | read-only | Object to indicate Sub- technologies in option template. |
| cnfTemplateTable | 1.3.6.1.4.1.9.9.387.1.6.2 | not-accessible | A control table to provide statistics of version 9 Flow and Option templates. | |
| NFT cnfTemplateType | 1.3.6.1.4.1.9.9.387.1.6.2.1.1 | NfTemplateTypes | not-accessible | Defines the structure and interpretation of fields in a data record and serves as an INDEX in this table. Version 9 has two types of Templates: Flow Templates and Option Templates. |
| cnfTopFlows | 1.3.6.1.4.1.9.9.387.1.7 | |||
| U32 cnfTopFlowsAvailableFlows | 1.3.6.1.4.1.9.9.387.1.7.3 | Unsigned32 | read-only | The number of entries currently available in cnfTopFlowsTable. |
| U32 cnfTopFlowsBytes | 1.3.6.1.4.1.9.9.387.1.7.8.1.24 | Unsigned32 | read-only | Number of bytes in the flow. |
| U32 cnfTopFlowsCacheTimeout | 1.3.6.1.4.1.9.9.387.1.7.7 | Unsigned32 | read-write | Top Flows Cache timeout. Top flows are cached for this length of time and not recalculated. Configure a high value to ensure the cache does not change during long queries. Setting this object (to any value) will expire the cache. |
| U32 cnfTopFlowsClassID | 1.3.6.1.4.1.9.9.387.1.7.8.1.22 | Unsigned32 | read-only | Netflow Class ID. |
| cnfTopFlowsControlGroup1 | 1.3.6.1.4.1.9.9.387.2.2.11 | A collection of objects providing the match criteria control information for Top Flows. | ||
| cnfTopFlowsControlGroup2 | 1.3.6.1.4.1.9.9.387.2.2.12 | A collection of objects providing the explicit control of the way top flows are generated. | ||
| cnfTopFlowsDataGroup1 | 1.3.6.1.4.1.9.9.387.2.2.8 | A collection of objects providing information for top flows. | ||
| cnfTopFlowsDataGroup2 | 1.3.6.1.4.1.9.9.387.2.2.9 | A collection of objects providing additional information for Top Flows. | ||
| IP cnfTopFlowsDstAddress | 1.3.6.1.4.1.9.9.387.1.7.8.1.6 | InetAddress | read-only | Destination address. |
| ADR cnfTopFlowsDstAddressMask | 1.3.6.1.4.1.9.9.387.1.7.8.1.7 | InetAddressPrefixLength | read-only | Number of bits in destination address mask. |
| IPt cnfTopFlowsDstAddressType | 1.3.6.1.4.1.9.9.387.1.7.8.1.5 | InetAddressType | read-only | Type of destination address. |
| INE cnfTopFlowsDstAS | 1.3.6.1.4.1.9.9.387.1.7.8.1.13 | InetAutonomousSystemNumber | read-only | Destination AS number. |
| INE cnfTopFlowsDstPort | 1.3.6.1.4.1.9.9.387.1.7.8.1.11 | InetPortNumber | read-only | Destination port number. |
| TIM cnfTopFlowsFirstSwitched | 1.3.6.1.4.1.9.9.387.1.7.8.1.16 | TimeStamp | read-only | Time flow was first switched. |
| U32 cnfTopFlowsFlags | 1.3.6.1.4.1.9.9.387.1.7.8.1.23 | Unsigned32 | read-only | Flow flags. |
| T/F cnfTopFlowsGenerate | 1.3.6.1.4.1.9.9.387.1.7.35 | TruthValue | read-write | A control variable used to generate the Top Flows. Setting this object to 'true' will generate the Top Flows and populate the Top Flows report in cnfTopFlowsTable unless cnfTopFlowsNextGenActionEffect is supported and the value of cnfTopFlowsNextGenActionEffect is 'noOp'. Setting this object to 'false' has no effect. When read, this object always returns 'false'. |
| cnfTopFlowsGroup | 1.3.6.1.4.1.9.9.387.2.2.7 | A collection of objects providing information for top flows. | ||
| U32 cnfTopFlowsIndex | 1.3.6.1.4.1.9.9.387.1.7.8.1.1 | Unsigned32 | not-accessible | Index to select top flows. A value of 1 selects the topmost flow. |
| NUM cnfTopFlowsInputIfIndex | 1.3.6.1.4.1.9.9.387.1.7.8.1.14 | InterfaceIndex | read-only | Input interface index. |
| TIM cnfTopFlowsLastSwitched | 1.3.6.1.4.1.9.9.387.1.7.8.1.17 | TimeStamp | read-only | Time flow was last switched. |
| STR cnfTopFlowsMatchClass | 1.3.6.1.4.1.9.9.387.1.7.29 | DisplayString | read-write | Class name to match. Leave blank to disable this match criteria. |
| NFF cnfTopFlowsMatchDirection | 1.3.6.1.4.1.9.9.387.1.7.34 | NfFlowDirectionTypes | read-write | Flow direction to match. A value of 0 disables this match criteria. |
| IP cnfTopFlowsMatchDstAddress | 1.3.6.1.4.1.9.9.387.1.7.13 | InetAddress | read-write | Destination address prefix to match. |
| ADR cnfTopFlowsMatchDstAddressMask | 1.3.6.1.4.1.9.9.387.1.7.14 | InetAddressPrefixLength | read-write | The length of the match destination address prefix. This prefix length must be consistent with the address type specified in cnfTopFlowsMatchDstAddressType. A length of zero only matches the all-zero address of the specified type. |
| IPt cnfTopFlowsMatchDstAddressType | 1.3.6.1.4.1.9.9.387.1.7.12 | InetAddressType | read-write | Destination address type to match. A value of 'unknown' (ie, 0) indicates the destination address is not used as a top flows match criteria, and clears the cnfTopFlowsMatchDstAddress and cnfTopFlowsMatchDstAddressMask configuration. |
| I32 cnfTopFlowsMatchDstAS | 1.3.6.1.4.1.9.9.387.1.7.23 | Integer32 | read-write | Destination AS number to match. A value of -1 disables this match criteria. |
| I32 cnfTopFlowsMatchDstPortHi | 1.3.6.1.4.1.9.9.387.1.7.21 | Integer32 | read-write | The maximum value that the layer-4 destination port number in the flow must have in order to match. A value of -1 disables this match criteria. |
| I32 cnfTopFlowsMatchDstPortLo | 1.3.6.1.4.1.9.9.387.1.7.20 | Integer32 | read-write | The minimum value that the layer-4 destination port number in the flow must have in order to match. A value of -1 disables this match criteria. |
| U32 cnfTopFlowsMatchingFlows | 1.3.6.1.4.1.9.9.387.1.7.4 | Unsigned32 | read-only | Total number of matching flows in the netflow cache. |
| NUM cnfTopFlowsMatchInputIf | 1.3.6.1.4.1.9.9.387.1.7.24 | InterfaceIndexOrZero | read-write | Input interface to match. A value of 0 disables this match criteria. |
| U32 cnfTopFlowsMatchMaxBytes | 1.3.6.1.4.1.9.9.387.1.7.33 | Unsigned32 | read-write | Maximum bytes to match. A value of 0 disables this match criteria. |
| U32 cnfTopFlowsMatchMaxPackets | 1.3.6.1.4.1.9.9.387.1.7.31 | Unsigned32 | read-write | Maximum packets to match. A value of 0 disables this match criteria. |
| U32 cnfTopFlowsMatchMinBytes | 1.3.6.1.4.1.9.9.387.1.7.32 | Unsigned32 | read-write | Minimum bytes to match. A value of 0 disables this match criteria. |
| U32 cnfTopFlowsMatchMinPackets | 1.3.6.1.4.1.9.9.387.1.7.30 | Unsigned32 | read-write | Minimum packets to match. A value of 0 disables this match criteria. |
| IP cnfTopFlowsMatchNhAddress | 1.3.6.1.4.1.9.9.387.1.7.16 | InetAddress | read-write | Nexthop address prefix to match. |
| ADR cnfTopFlowsMatchNhAddressMask | 1.3.6.1.4.1.9.9.387.1.7.17 | InetAddressPrefixLength | read-write | The length of the match nexthop address Prefix. This prefix length must be consistent with the address type specified in cnfTopFlowsMatchNhAddressType. A length of zero only matches the all-zero address of the specified type. |
| IPt cnfTopFlowsMatchNhAddressType | 1.3.6.1.4.1.9.9.387.1.7.15 | InetAddressType | read-write | Nexthop address type to match. A value of 'unknown' (ie, 0) indicates the nexthop address is not used as a top flows match criteria, and clears the cnfTopFlowsMatchNhAddress and cnfTopFlowsMatchNhAddressMask configuration. |
| NUM cnfTopFlowsMatchOutputIf | 1.3.6.1.4.1.9.9.387.1.7.25 | InterfaceIndexOrZero | read-write | Output interface to match. A value of 0 disables this match criteria. |
| I32 cnfTopFlowsMatchProtocol | 1.3.6.1.4.1.9.9.387.1.7.27 | Integer32 | read-write | Protocol to match. A value of -1 disables this match criteria. |
| STR cnfTopFlowsMatchSampler | 1.3.6.1.4.1.9.9.387.1.7.28 | DisplayString | read-write | Sampler name to match. Leave blank to disable this match criteria. |
| IP cnfTopFlowsMatchSrcAddress | 1.3.6.1.4.1.9.9.387.1.7.10 | InetAddress | read-write | Source address prefix to match. |
| ADR cnfTopFlowsMatchSrcAddressMask | 1.3.6.1.4.1.9.9.387.1.7.11 | InetAddressPrefixLength | read-write | The length of the match source address prefix. This prefix length must be consistent with the address type specified in cnfTopFlowsMatchSrcAddressType. A length of zero only matches the all-zero address of the specified type. |
| IPt cnfTopFlowsMatchSrcAddressType | 1.3.6.1.4.1.9.9.387.1.7.9 | InetAddressType | read-write | Source address type to match. A value of 'unknown' (ie, 0) indicates the source address is not used as a top flows match criteria, and clears the cnfTopFlowsMatchSrcAddress and cnfTopFlowsMatchSrcAddressMask configuration. |
| I32 cnfTopFlowsMatchSrcAS | 1.3.6.1.4.1.9.9.387.1.7.22 | Integer32 | read-write | Source AS number to match. A value of -1 disables this match criteria. |
| I32 cnfTopFlowsMatchSrcPortHi | 1.3.6.1.4.1.9.9.387.1.7.19 | Integer32 | read-write | The maximum value that the layer-4 source port number in the flow must have in order to match. A value of -1 disables this match criteria. |
| I32 cnfTopFlowsMatchSrcPortLo | 1.3.6.1.4.1.9.9.387.1.7.18 | Integer32 | read-write | The minimum value that the layer-4 source port number in the flow must have in order to match. A value of -1 disables this match criteria. |
| I32 cnfTopFlowsMatchTOSByte | 1.3.6.1.4.1.9.9.387.1.7.26 | Integer32 | read-write | TOS byte to match. A value of -1 disables this match criteria. |
| INT cnfTopFlowsNextGenActionEffect | 1.3.6.1.4.1.9.9.387.1.7.37 | INTEGER | read-only | Indicates the action effect on the system when the cnfTopFlowsGenerate is set to 'true'. 'noOp' -- indicate that the system will make no operation when the cnfTopFlowsGenerate is set to 'true'. Examples when this object could return 'noOp' are: 1. the system is still in the top flow generation process. 2. the system will not generate the top flows report when the value of cnfTopFlowsReportAvailable is 'true'. 'generate' -- indicates that the system will start the top flows generation process if the cntTopFlowsGenerate is set to 'true'. Examples when this object could return 'generate' are: 1. When the value of cnfTopFlowsReportAvailable is 'false'. 2. The system will always generate the top flow report when cnfTopFlowsGenerate is set to 'true'. |
| IP cnfTopFlowsNhAddress | 1.3.6.1.4.1.9.9.387.1.7.8.1.9 | InetAddress | read-only | Nexthop address. |
| IPt cnfTopFlowsNhAddressType | 1.3.6.1.4.1.9.9.387.1.7.8.1.8 | InetAddressType | read-only | The type of nexthop address. |
| NUM cnfTopFlowsOutputIfIndex | 1.3.6.1.4.1.9.9.387.1.7.8.1.15 | InterfaceIndex | read-only | Output interface index. |
| U32 cnfTopFlowsPackets | 1.3.6.1.4.1.9.9.387.1.7.8.1.25 | Unsigned32 | read-only | Number of packets in the flow. |
| U32 cnfTopFlowsProtocol | 1.3.6.1.4.1.9.9.387.1.7.8.1.19 | Unsigned32 | read-only | Protocol number. |
| T/F cnfTopFlowsReportAvailable | 1.3.6.1.4.1.9.9.387.1.7.36 | TruthValue | read-only | Indicates whether the Top Flows report has been successfully generated and is available in cnfTopFlowsTable. When the value of this object is 'true', the top flows report is available in cnfTopFlowsTable. When the value of this object is 'false', there is no top flows report available in cnfTopFlowsTable. For Example: 1. When top flows report has not been generated or is currently in the generation process. 2. When the top flows has been purged due to the modification of a matching criteria or the expiration of top flow cache timeout. |
| cnfTopFlowsReportGenerateGroup | 1.3.6.1.4.1.9.9.387.2.2.15 | A collection of objects providing information about the Top Flows Report generation. | ||
| INT cnfTopFlowsReportSource | 1.3.6.1.4.1.9.9.387.1.7.38 | INTEGER | read-only | Indicates the source of Top Flows report generation for the entries populated in cnfTopFlowsTable. 'other' - The Top Flows are not available or the source of the Top Flows cannot be identified. 'hardware' - The Top Flows report has been generated based on the flows detected by the hardware platform with netflow capabilities. 'software' - The Top Flows report has been generated based on the flows detected by the software. 'both' - The Top Flows report is an integrated list of Top Flows detected by both the hardware platform and the software. |
| U32 cnfTopFlowsSamplerID | 1.3.6.1.4.1.9.9.387.1.7.8.1.21 | Unsigned32 | read-only | Netflow Sampler ID. |
| NFT cnfTopFlowsSortBy | 1.3.6.1.4.1.9.9.387.1.7.6 | NfTopFlowsSortTypes | read-write | Indicates how the entries in cnfTopFLowsTable are to be sorted. A value of 'noSort' disables Top Flows. |
| IP cnfTopFlowsSrcAddress | 1.3.6.1.4.1.9.9.387.1.7.8.1.3 | InetAddress | read-only | Source address. |
| ADR cnfTopFlowsSrcAddressMask | 1.3.6.1.4.1.9.9.387.1.7.8.1.4 | InetAddressPrefixLength | read-only | Number of bits in source address mask. |
| IPt cnfTopFlowsSrcAddressType | 1.3.6.1.4.1.9.9.387.1.7.8.1.2 | InetAddressType | read-only | Type of source address. |
| INE cnfTopFlowsSrcAS | 1.3.6.1.4.1.9.9.387.1.7.8.1.12 | InetAutonomousSystemNumber | read-only | Source AS number. |
| INE cnfTopFlowsSrcPort | 1.3.6.1.4.1.9.9.387.1.7.8.1.10 | InetPortNumber | read-only | Source port number. |
| cnfTopFlowsTable | 1.3.6.1.4.1.9.9.387.1.7.8 | not-accessible | Table of flows which have accrued the highest packets or bytes. Each row in the table represents one flow from the cache. | |
| cnfTopFlowsTableEntry | 1.3.6.1.4.1.9.9.387.1.7.8.1 | not-accessible | A conceptual row in the cnfTopFlowsTable. | |
| U32 cnfTopFlowsTCPFlags | 1.3.6.1.4.1.9.9.387.1.7.8.1.20 | Unsigned32 | read-only | TCP flags. |
| TIM cnfTopFlowsTimeStamp | 1.3.6.1.4.1.9.9.387.1.7.1 | TimeStamp | read-only | Indicates the time when cnfTopFlowsTable was last updated. |
| U32 cnfTopFlowsTopN | 1.3.6.1.4.1.9.9.387.1.7.2 | Unsigned32 | read-write | Maximum number of top flows to calculate. A value of 0 disables the Top Flows feature. |
| U32 cnfTopFlowsTOS | 1.3.6.1.4.1.9.9.387.1.7.8.1.18 | Unsigned32 | read-only | Type of service. |
| U32 cnfTopFlowsTotalFlows | 1.3.6.1.4.1.9.9.387.1.7.5 | Unsigned32 | read-only | Total number of flows in the netflow cache. |
| VLA cnfTopFlowsVlan | 1.3.6.1.4.1.9.9.387.1.7.8.1.26 | VlanIndex | read-only | The VLAN-ID of this flow. |
| cnfTopFlowsVlanGroup | 1.3.6.1.4.1.9.9.387.2.2.10 | A collection of objects providing VLAN information about the top flows. |
RFC description
Manages NetFlow cache configuration, export statistics, and traffic analysis on Cisco routers.
Start monitoring Cisco routers and switches (NetFlow) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.