All MIBs › CISCO-UNIFIED-FIREWALL-MIB › cufwAaicEndofFlowEvCount
cufwAaicEndofFlowEvCount
Module: CISCO-UNIFIED-FIREWALL-MIB
OID (symbolic): CISCO-UNIFIED-FIREWALL-MIB::cufwAaicEndofFlowEvCount
OID (numeric): 1.3.6.1.4.1.9.9.491.1.5.3.1.9
Node type: OBJECT-TYPE
Type: Counter64
Access: read-only
Description: The Lina process sends end-of-flow events to Snort when a fast path flow ends.
What is cufwAaicEndofFlowEvCount?
This Counter64, in Event, counts end-of-flow events the Lina process sends to Snort when a fast-path flow, one that was never directly sent to Snort for inspection, ends. An admin pairs this with cufwAaicStartofFlowEvCount to confirm flows are being properly closed out in Snort's connection tracking, not just opened. A mismatch between start-of-flow and end-of-flow counts over time would suggest some flows aren't being properly closed out in Snort's records.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.9.491.1.5.3.1.9 snmpwalk -v2c -c public <target> CISCO-UNIFIED-FIREWALL-MIB::cufwAaicEndofFlowEvCount
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.9.9.491.1.5.3.1.9.1 snmpget -v2c -c public <target> CISCO-UNIFIED-FIREWALL-MIB::cufwAaicEndofFlowEvCount.1
SNMPv3 example:
snmpget -v3 -l authPriv -u snmpv3-user -a SHA -A "AuthPassword1" -x AES -X "PrivPassword1" <target> cufwAaicEndofFlowEvCount.1
Start monitoring Cisco ASA firewalls / IOS zone-based firewall devices with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-UNIFIED-FIREWALL-MIB::cufwAaicEndofFlowEvCount OID value, configure state conditions and alerts, and monitor any Cisco ASA firewalls / IOS zone-based firewall devices from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.9 | cisco | CAT2600-MIB |
| 1.3.6.1.4.1.9.9 | ciscoMgmt | CISCO-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.9.9.491 | ciscoUnifiedFirewallMIB | CISCO-UNIFIED-FIREWALL-MIB |
| 1.3.6.1.4.1.9.9.491.1 | ciscoUnifiedFirewallMIBObjects | CISCO-UNIFIED-FIREWALL-MIB |
| 1.3.6.1.4.1.9.9.491.1.5 | cuFwAaicGrp | CISCO-UNIFIED-FIREWALL-MIB |
| 1.3.6.1.4.1.9.9.491.1.5.3 | cufwAaicEngineStats | CISCO-UNIFIED-FIREWALL-MIB |
| 1.3.6.1.4.1.9.9.491.1.5.3.1 | cufwAaicLinaSnortStats | CISCO-UNIFIED-FIREWALL-MIB |
| 1.3.6.1.4.1.9.9.491.1.5.3.1.9 | cufwAaicEndofFlowEvCount | CISCO-UNIFIED-FIREWALL-MIB |