All MIBs › OPENBSD-PF-MIB › pfCntStateLimit
pfCntStateLimit
Module: OPENBSD-PF-MIB
OID (symbolic): OPENBSD-PF-MIB::pfCntStateLimit
OID (numeric): 1.3.6.1.4.1.30155.1.2.13
Node type: OBJECT-TYPE
Type: Counter64
Access: read-only
Description: The number of packets that were dropped due to the per-rule max state limit being reached.
What is pfCntStateLimit?
Counts packets dropped because a filter rule's per-rule maximum state limit (set via 'keep state (max N)') was reached. If this climbs, either legitimate traffic is being throttled and the rule's limit needs raising, or it may indicate a connection-flood attack against that rule.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.30155.1.2.13 snmpwalk -v2c -c public <target> OPENBSD-PF-MIB::pfCntStateLimit
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.30155.1.2.13.1 snmpget -v2c -c public <target> OPENBSD-PF-MIB::pfCntStateLimit.1
Start monitoring OpenBSD firewall/router host (pf packet filter statistics) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the OPENBSD-PF-MIB::pfCntStateLimit OID value, configure state conditions and alerts, and monitor any OpenBSD firewall/router host (pf packet filter statistics) from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.30155 | openBSD | OPENBSD-BASE-MIB |
| 1.3.6.1.4.1.30155.1 | pfMIBObjects | OPENBSD-BASE-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.30155.1.2 | pfCounters | OPENBSD-PF-MIB |
| 1.3.6.1.4.1.30155.1.2.13 | pfCntStateLimit | OPENBSD-PF-MIB |