All MIBs › OPENBSD-PF-MIB › pfCntStateMismatch
pfCntStateMismatch
Module: OPENBSD-PF-MIB
OID (symbolic): OPENBSD-PF-MIB::pfCntStateMismatch
OID (numeric): 1.3.6.1.4.1.30155.1.2.11
Node type: OBJECT-TYPE
Type: Counter64
Access: read-only
Description: The number of packets that were dropped due to a state table mismatch.
What is pfCntStateMismatch?
Counts packets dropped because they didn't match the expected TCP/UDP state of an existing state-table entry (e.g., unexpected sequence numbers or flags on an established connection). Frequent increases can indicate a broken client/server exchange, asymmetric routing, or an attempted spoofing/injection attack.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.30155.1.2.11 snmpwalk -v2c -c public <target> OPENBSD-PF-MIB::pfCntStateMismatch
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.30155.1.2.11.1 snmpget -v2c -c public <target> OPENBSD-PF-MIB::pfCntStateMismatch.1
Start monitoring OpenBSD firewall/router host (pf packet filter statistics) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the OPENBSD-PF-MIB::pfCntStateMismatch OID value, configure state conditions and alerts, and monitor any OpenBSD firewall/router host (pf packet filter statistics) from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.30155 | openBSD | OPENBSD-BASE-MIB |
| 1.3.6.1.4.1.30155.1 | pfMIBObjects | OPENBSD-BASE-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.30155.1.2 | pfCounters | OPENBSD-PF-MIB |
| 1.3.6.1.4.1.30155.1.2.11 | pfCntStateMismatch | OPENBSD-PF-MIB |