You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

2079 lines
82 KiB

zabbix_export:
version: '7.0'
template_groups:
- uuid: a571c0d144b14fd4a87a9d9b2aa9fcd6
name: Templates/Applications
templates:
- uuid: 0c94915edb4c41bf8c627dddb4f68f5a
template: 'OPNsense by SNMP'
name: 'OPNsense by SNMP'
description: |
Template for monitoring OPNsense by SNMP
Setup:
1. Enable bsnmpd daemon by creating new config file "/etc/rc.conf.d/bsnmpd" with the following content:
bsnmpd_enable="YES"
2. Uncomment the following lines in "/etc/snmpd.config" file to enable required SNMP modules:
begemotSnmpdModulePath."hostres" = "/usr/lib/snmp_hostres.so"
begemotSnmpdModulePath."pf" = "/usr/lib/snmp_pf.so"
3. Start bsnmpd daemon with the following command:
/etc/rc.d/bsnmpd start
4. Setup a firewall rule to get access from Zabbix proxy or Zabbix server by SNMP (https://docs.opnsense.org/manual/firewall.html).
5. Link the template to a host.
MIBs used:
BEGEMOT-PF-MIB
HOST-RESOURCES-MIB
Generated by official Zabbix template tool "Templator" 2.0.0
vendor:
name: Zabbix
version: 7.0-0
groups:
- name: Templates/Applications
items:
- uuid: 1a075e6ed87c4d40b912956e9c02573f
name: 'OPNsense: DHCP server status'
type: SNMP_AGENT
snmp_oid: '.1.3.6.1.2.1.25.4.2.1.7["index",".1.3.6.1.2.1.25.4.2.1.2","dhcpd"]'
key: opnsense.dhcpd.status
history: 7d
description: |
MIB: HOST-RESOURCES-MIB
The status of DHCP server process.
valuemap:
name: 'Services status'
preprocessing:
- type: CHECK_NOT_SUPPORTED
parameters:
- ''
error_handler: CUSTOM_VALUE
error_handler_params: '0'
tags:
- tag: component
value: application
triggers:
- uuid: fba46d0094bc4f0e98537ceca27dd6bc
expression: 'last(/OPNsense by SNMP/opnsense.dhcpd.status)=0'
name: 'OPNsense: DHCP server is not running'
opdata: 'Current state: {ITEM.LASTVALUE1}'
priority: AVERAGE
description: 'Please check DHCP server settings.'
tags:
- tag: scope
value: availability
- uuid: c52c2b9a3d4e4446a8af02e5a51e9c55
name: 'OPNsense: DNS server status'
type: SNMP_AGENT
snmp_oid: '.1.3.6.1.2.1.25.4.2.1.7["index",".1.3.6.1.2.1.25.4.2.1.2","unbound"]'
key: opnsense.dns.status
history: 7d
description: |
MIB: HOST-RESOURCES-MIB
The status of DNS server process.
valuemap:
name: 'Services status'
preprocessing:
- type: CHECK_NOT_SUPPORTED
parameters:
- ''
error_handler: CUSTOM_VALUE
error_handler_params: '0'
tags:
- tag: component
value: application
triggers:
- uuid: 0e2cbbbd999d476a84cb93a9b7ef42d6
expression: 'last(/OPNsense by SNMP/opnsense.dns.status)=0'
name: 'OPNsense: DNS server is not running'
opdata: 'Current state: {ITEM.LASTVALUE1}'
priority: AVERAGE
description: 'Please check DNS server settings.'
tags:
- tag: scope
value: availability
- uuid: 4bc80f5cece045cfa103fa9d4e5db9c6
name: 'OPNsense: Web server status'
type: SNMP_AGENT
snmp_oid: '.1.3.6.1.2.1.25.4.2.1.7["index",".1.3.6.1.2.1.25.4.2.1.2","lighttpd"]'
key: opnsense.lighttpd.status
history: 7d
description: |
MIB: HOST-RESOURCES-MIB
The status of lighttpd process.
valuemap:
name: 'Services status'
preprocessing:
- type: CHECK_NOT_SUPPORTED
parameters:
- ''
error_handler: CUSTOM_VALUE
error_handler_params: '0'
tags:
- tag: component
value: application
triggers:
- uuid: 7864dec91012436f89b728019bf99fda
expression: 'last(/OPNsense by SNMP/opnsense.lighttpd.status)=0'
name: 'OPNsense: Web server is not running'
opdata: 'Current state: {ITEM.LASTVALUE1}'
priority: AVERAGE
description: 'Please check lighttpd service status.'
tags:
- tag: scope
value: availability
- uuid: 6a77c077e6bb44439ad766de038f71f1
name: 'OPNsense: Packets with bad offset'
type: SNMP_AGENT
snmp_oid: 1.3.6.1.4.1.12325.1.200.1.2.2.0
key: opnsense.packets.bad.offset
history: 7d
value_type: FLOAT
units: pps
description: |
MIB: BEGEMOT-PF-MIB
True if the packet was logged with the specified packet filter reason code. The known codes are: match, bad-offset, fragment, short, normalize, and memory.
preprocessing:
- type: CHANGE_PER_SECOND
parameters:
- ''
tags:
- tag: component
value: network
- uuid: f8503508e3e646c781d637d1aefaf21a
name: 'OPNsense: Fragmented packets'
type: SNMP_AGENT
snmp_oid: 1.3.6.1.4.1.12325.1.200.1.2.3.0
key: opnsense.packets.fragment
history: 7d
value_type: FLOAT
units: pps
description: |
MIB: BEGEMOT-PF-MIB
True if the packet was logged with the specified packet filter reason code. The known codes are: match, bad-offset, fragment, short, normalize, and memory.
preprocessing:
- type: CHANGE_PER_SECOND
parameters:
- ''
tags:
- tag: component
value: network
- uuid: ae0bfb3bd36e4b05ae490c4b70ba1313
name: 'OPNsense: Packets matched a filter rule'
type: SNMP_AGENT
snmp_oid: 1.3.6.1.4.1.12325.1.200.1.2.1.0
key: opnsense.packets.match
history: 7d
value_type: FLOAT
units: pps
description: |
MIB: BEGEMOT-PF-MIB
True if the packet was logged with the specified packet filter reason code. The known codes are: match, bad-offset, fragment, short, normalize, and memory.
preprocessing:
- type: CHANGE_PER_SECOND
parameters:
- ''
tags:
- tag: component
value: network
- uuid: 3983366c271f4e9896d738c58f2d850f
name: 'OPNsense: Packets dropped due to memory limitation'
type: SNMP_AGENT
snmp_oid: 1.3.6.1.4.1.12325.1.200.1.2.6.0
key: opnsense.packets.mem.drop
history: 7d
value_type: FLOAT
units: pps
description: |
MIB: BEGEMOT-PF-MIB
True if the packet was logged with the specified packet filter reason code. The known codes are: match, bad-offset, fragment, short, normalize, and memory.
preprocessing:
- type: CHANGE_PER_SECOND
parameters:
- ''
tags:
- tag: component
value: network
- uuid: 7c8d4623d2fd4b77b0749caa67530bb2
name: 'OPNsense: Normalized packets'
type: SNMP_AGENT
snmp_oid: 1.3.6.1.4.1.12325.1.200.1.2.5.0
key: opnsense.packets.normalize
history: 7d
value_type: FLOAT
units: pps
description: |
MIB: BEGEMOT-PF-MIB
True if the packet was logged with the specified packet filter reason code. The known codes are: match, bad-offset, fragment, short, normalize, and memory.
preprocessing:
- type: CHANGE_PER_SECOND
parameters:
- ''
tags:
- tag: component
value: network
- uuid: 7b845d8282ee4c1394c71c22ada31da9
name: 'OPNsense: Short packets'
type: SNMP_AGENT
snmp_oid: 1.3.6.1.4.1.12325.1.200.1.2.4.0
key: opnsense.packets.short
history: 7d
value_type: FLOAT
units: pps
description: |
MIB: BEGEMOT-PF-MIB
True if the packet was logged with the specified packet filter reason code. The known codes are: match, bad-offset, fragment, short, normalize, and memory.
preprocessing:
- type: CHANGE_PER_SECOND
parameters:
- ''
tags:
- tag: component
value: network
- uuid: f2b82b136ea943909a7b6317bf8b7785
name: 'OPNsense: Packet filter running status'
type: SNMP_AGENT
snmp_oid: 1.3.6.1.4.1.12325.1.200.1.1.1.0
key: opnsense.pf.status
history: 7d
description: |
MIB: BEGEMOT-PF-MIB
True if packet filter is currently enabled.
valuemap:
name: 'SNMPv2-TC::TruthValue'
tags:
- tag: component
value: application
- tag: component
value: health
triggers:
- uuid: 42d9a74d984d4ac2bf778be74cd8588f
expression: 'last(/OPNsense by SNMP/opnsense.pf.status)<>1'
name: 'OPNsense: Packet filter is not running'
opdata: 'Current running state: {ITEM.LASTVALUE1}'
priority: HIGH
description: 'Please check PF status.'
tags:
- tag: scope
value: availability
- uuid: 289cece23b5d4f17ba50d0373db4ed33
name: 'OPNsense: Firewall rules count'
type: SNMP_AGENT
snmp_oid: .1.3.6.1.4.1.12325.1.200.1.11.1.0
key: opnsense.rules.count
history: 7d
description: |
MIB: BEGEMOT-PF-MIB
The number of labeled filter rules on this system.
tags:
- tag: component
value: firewall
- uuid: 6e40ddbf15a54b0e8ae2d1c52d5c2eba
name: 'OPNsense: Source tracking table current'
type: SNMP_AGENT
snmp_oid: 1.3.6.1.4.1.12325.1.200.1.4.1.0
key: opnsense.source.tracking.table.count
history: 7d
description: |
MIB: BEGEMOT-PF-MIB
Number of entries in the source tracking table.
tags:
- tag: component
value: network
- uuid: a9b848d5c2254efdaf74ff48ce4003c4
name: 'OPNsense: Source tracking table limit'
type: SNMP_AGENT
snmp_oid: 1.3.6.1.4.1.12325.1.200.1.5.2.0
key: opnsense.source.tracking.table.limit
history: 7d
description: |
MIB: BEGEMOT-PF-MIB
Maximum number of 'sticky-address' or 'source-track' rules in the ruleset.
tags:
- tag: component
value: network
- uuid: 1452fc4e67564233b12dc892fde1959a
name: 'OPNsense: Source tracking table utilization in %'
type: CALCULATED
key: opnsense.source.tracking.table.pused
history: 7d
value_type: FLOAT
units: '%'
params: 'last(//opnsense.source.tracking.table.count) * 100 / last(//opnsense.source.tracking.table.limit)'
description: 'Utilization of source tracking table in %.'
tags:
- tag: component
value: network
triggers:
- uuid: d1f03d136f30401b8f70cbc3196446ee
expression: 'min(/OPNsense by SNMP/opnsense.source.tracking.table.pused,#3)>{$SOURCE.TRACKING.TABLE.UTIL.MAX}'
name: 'OPNsense: Source tracking table usage is high'
event_name: 'OPNsense: Source tracking table usage more than {$SOURCE.TRACKING.TABLE.UTIL.MAX}.'
opdata: 'Current utilization: {ITEM.LASTVALUE1}'
priority: WARNING
description: 'Please check the number of sticky connections.'
tags:
- tag: scope
value: capacity
- uuid: 1c399a2204bc44d4a9b1a4017840fd75
name: 'OPNsense: States table current'
type: SNMP_AGENT
snmp_oid: 1.3.6.1.4.1.12325.1.200.1.3.1.0
key: opnsense.state.table.count
history: 7d
description: |
MIB: BEGEMOT-PF-MIB
Number of entries in the state table.
tags:
- tag: component
value: network
- uuid: 3bd8ea1e2cb44b4cb0f7d16a9339b9e4
name: 'OPNsense: States table limit'
type: SNMP_AGENT
snmp_oid: 1.3.6.1.4.1.12325.1.200.1.5.1.0
key: opnsense.state.table.limit
history: 7d
description: |
MIB: BEGEMOT-PF-MIB
Maximum number of 'keep state' rules in the ruleset.
tags:
- tag: component
value: network
- uuid: 17a0f633e2a14e63b0282b785a66c62a
name: 'OPNsense: States table utilization in %'
type: CALCULATED
key: opnsense.state.table.pused
history: 7d
value_type: FLOAT
units: '%'
params: 'last(//opnsense.state.table.count) * 100 / last(//opnsense.state.table.limit)'
description: 'Utilization of state table in %.'
tags:
- tag: component
value: network
triggers:
- uuid: f31e301def314e9b81ee0f8a26dc1e37
expression: 'min(/OPNsense by SNMP/opnsense.state.table.pused,#3)>{$STATE.TABLE.UTIL.MAX}'
name: 'OPNsense: State table usage is high'
event_name: 'OPNsense: State table usage more than {$STATE.TABLE.UTIL.MAX}.'
opdata: 'Current utilization: {ITEM.LASTVALUE1}'
priority: WARNING
description: 'Please check the number of connections.'
tags:
- tag: scope
value: capacity
- uuid: 00f2e8aa55754a7b9063afc1d7749d85
name: 'OPNsense: SNMP agent availability'
type: INTERNAL
key: 'zabbix[host,snmp,available]'
history: 7d
description: |
Availability of SNMP checks on the host. The value of this item corresponds to availability icons in the host list.
Possible value:
0 - not available
1 - available
2 - unknown
valuemap:
name: zabbix.host.available
tags:
- tag: component
value: health
- tag: component
value: network
triggers:
- uuid: f2cb074945624a8184ceb1ab3d3b2f52
expression: 'max(/OPNsense by SNMP/zabbix[host,snmp,available],{$SNMP.TIMEOUT})=0'
name: 'OPNsense: No SNMP data collection'
opdata: 'Current state: {ITEM.LASTVALUE1}'
priority: WARNING
description: 'SNMP is not available for polling. Please check device connectivity and SNMP settings.'
tags:
- tag: scope
value: availability
discovery_rules:
- uuid: d7830514425f47eda3ac8ec20a1801b9
name: 'Network interfaces discovery'
type: SNMP_AGENT
snmp_oid: 'discovery[{#IFOPERSTATUS},1.3.6.1.2.1.2.2.1.8,{#IFADMINSTATUS},1.3.6.1.2.1.2.2.1.7,{#IFALIAS},1.3.6.1.2.1.31.1.1.1.18,{#IFNAME},1.3.6.1.2.1.31.1.1.1.1,{#IFDESCR},1.3.6.1.2.1.2.2.1.2,{#IFTYPE},1.3.6.1.2.1.2.2.1.3]'
key: opnsense.net.if.discovery
delay: 1h
filter:
evaltype: AND
conditions:
- macro: '{#IFADMINSTATUS}'
value: '{$NET.IF.IFADMINSTATUS.MATCHES}'
formulaid: A
- macro: '{#IFADMINSTATUS}'
value: '{$NET.IF.IFADMINSTATUS.NOT_MATCHES}'
operator: NOT_MATCHES_REGEX
formulaid: B
- macro: '{#IFOPERSTATUS}'
value: '{$NET.IF.IFOPERSTATUS.MATCHES}'
formulaid: I
- macro: '{#IFOPERSTATUS}'
value: '{$NET.IF.IFOPERSTATUS.NOT_MATCHES}'
operator: NOT_MATCHES_REGEX
formulaid: J
- macro: '{#IFNAME}'
value: '@Network interfaces for discovery'
formulaid: G
- macro: '{#IFNAME}'
value: '{$NET.IF.IFNAME.NOT_MATCHES}'
operator: NOT_MATCHES_REGEX
formulaid: H
- macro: '{#IFDESCR}'
value: '{$NET.IF.IFDESCR.MATCHES}'
formulaid: E
- macro: '{#IFDESCR}'
value: '{$NET.IF.IFDESCR.NOT_MATCHES}'
operator: NOT_MATCHES_REGEX
formulaid: F
- macro: '{#IFALIAS}'
value: '{$NET.IF.IFALIAS.MATCHES}'
formulaid: C
- macro: '{#IFALIAS}'
value: '{$NET.IF.IFALIAS.NOT_MATCHES}'
operator: NOT_MATCHES_REGEX
formulaid: D
- macro: '{#IFTYPE}'
value: '{$NET.IF.IFTYPE.MATCHES}'
formulaid: K
- macro: '{#IFTYPE}'
value: '{$NET.IF.IFTYPE.NOT_MATCHES}'
operator: NOT_MATCHES_REGEX
formulaid: L
description: 'Discovering interfaces from IF-MIB.'
item_prototypes:
- uuid: 3a687275a219460c92433bda90be8d59
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Inbound IPv4 traffic blocked'
type: SNMP_AGENT
snmp_oid: '.1.3.6.1.4.1.12325.1.200.1.8.2.1.8["index",".1.3.6.1.4.1.12325.1.200.1.8.2.1.2","{#IFDESCR}"]'
key: 'net.if.in.block.v4.bps[{#SNMPINDEX}]'
history: 7d
units: bps
description: |
MIB: BEGEMOT-PF-MIB
IPv4 bits per second blocked coming in on this interface.
preprocessing:
- type: CHANGE_PER_SECOND
parameters:
- ''
- type: MULTIPLIER
parameters:
- '8'
tags:
- tag: component
value: firewall
- tag: component
value: network
- tag: description
value: '{#IFALIAS}'
- tag: interface
value: '{#IFNAME}'
- uuid: d34be70208614a599e8706ede8d28f6d
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Inbound IPv4 packets blocked'
type: SNMP_AGENT
snmp_oid: '.1.3.6.1.4.1.12325.1.200.1.8.2.1.12["index",".1.3.6.1.4.1.12325.1.200.1.8.2.1.2","{#IFDESCR}"]'
key: 'net.if.in.block.v4.pps[{#SNMPINDEX}]'
history: 7d
units: pps
description: |
MIB: BEGEMOT-PF-MIB
The number of IPv4 packets blocked coming in on this interface.
preprocessing:
- type: CHANGE_PER_SECOND
parameters:
- ''
tags:
- tag: component
value: firewall
- tag: component
value: network
- tag: description
value: '{#IFALIAS}'
- tag: interface
value: '{#IFNAME}'
- uuid: e6bc104196ad44f8abf8b7609b464f07
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Inbound IPv6 traffic blocked'
type: SNMP_AGENT
snmp_oid: '.1.3.6.1.4.1.12325.1.200.1.8.2.1.16["index",".1.3.6.1.4.1.12325.1.200.1.8.2.1.2","{#IFDESCR}"]'
key: 'net.if.in.block.v6.bps[{#SNMPINDEX}]'
history: 7d
units: bps
description: |
MIB: BEGEMOT-PF-MIB
IPv6 bits per second blocked coming in on this interface.
preprocessing:
- type: CHANGE_PER_SECOND
parameters:
- ''
- type: MULTIPLIER
parameters:
- '8'
tags:
- tag: component
value: firewall
- tag: component
value: network
- tag: description
value: '{#IFALIAS}'
- tag: interface
value: '{#IFNAME}'
- uuid: b9335034e4f94bb1b15f5b74a6467f89
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Inbound IPv6 packets blocked'
type: SNMP_AGENT
snmp_oid: '.1.3.6.1.4.1.12325.1.200.1.8.2.1.20["index",".1.3.6.1.4.1.12325.1.200.1.8.2.1.2","{#IFDESCR}"]'
key: 'net.if.in.block.v6.pps[{#SNMPINDEX}]'
history: 7d
units: pps
description: |
MIB: BEGEMOT-PF-MIB
The number of IPv6 packets blocked coming in on this interface.
preprocessing:
- type: CHANGE_PER_SECOND
parameters:
- ''
tags:
- tag: component
value: firewall
- tag: component
value: network
- tag: description
value: '{#IFALIAS}'
- tag: interface
value: '{#IFNAME}'
- uuid: 77ad7ea9f85d419a81d99531ba71ef1d
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Inbound packets discarded'
type: SNMP_AGENT
snmp_oid: '1.3.6.1.2.1.2.2.1.13.{#SNMPINDEX}'
key: 'net.if.in.discards[{#SNMPINDEX}]'
history: 7d
description: |
MIB: IF-MIB
The number of inbound packets which were chosen to be discarded
even though no errors had been detected to prevent their being deliverable to a higher-layer protocol.
One possible reason for discarding such a packet could be to free up buffer space.
Discontinuities in the value of this counter can occur at re-initialization of the management system,
and at other times as indicated by the value of ifCounterDiscontinuityTime.
preprocessing:
- type: CHANGE_PER_SECOND
parameters:
- ''
tags:
- tag: component
value: network
- tag: description
value: '{#IFALIAS}'
- tag: interface
value: '{#IFNAME}'
- uuid: c6f650d534c94a1bb0bf1faca829c538
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Inbound packets with errors'
type: SNMP_AGENT
snmp_oid: '1.3.6.1.2.1.2.2.1.14.{#SNMPINDEX}'
key: 'net.if.in.errors[{#SNMPINDEX}]'
history: 7d
description: |
MIB: IF-MIB
For packet-oriented interfaces, the number of inbound packets that contained errors preventing them from being deliverable to a higher-layer protocol. For character-oriented or fixed-length interfaces, the number of inbound transmission units that contained errors preventing them from being deliverable to a higher-layer protocol. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
preprocessing:
- type: CHANGE_PER_SECOND
parameters:
- ''
tags:
- tag: component
value: network
- tag: description
value: '{#IFALIAS}'
- tag: interface
value: '{#IFNAME}'
trigger_prototypes:
- uuid: 5a58e9ffee1f45c4a4f859c1f0b7c2dc
expression: 'min(/OPNsense by SNMP/net.if.in.errors[{#SNMPINDEX}],5m)>{$IF.ERRORS.WARN:"{#IFNAME}"}'
recovery_mode: RECOVERY_EXPRESSION
recovery_expression: 'max(/OPNsense by SNMP/net.if.in.errors[{#SNMPINDEX}],5m)<{$IF.ERRORS.WARN:"{#IFNAME}"}*0.8'
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: High input error rate'
event_name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: High input error rate ( > {$IF.ERRORS.WARN:"{#IFNAME}"} for 5m)'
opdata: 'errors in: {ITEM.LASTVALUE1}'
priority: WARNING
description: 'It recovers when it is below 80% of the `{$IF.ERRORS.WARN:"{#IFNAME}"}` threshold.'
dependencies:
- name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Link down'
expression: '{$IFCONTROL:"{#IFNAME}"}=1 and (last(/OPNsense by SNMP/net.if.status[{#SNMPINDEX}])=2)'
tags:
- tag: scope
value: availability
- uuid: da65b40184d84a2a98dd595e17794875
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Inbound IPv4 traffic passed'
type: SNMP_AGENT
snmp_oid: '.1.3.6.1.4.1.12325.1.200.1.8.2.1.7["index",".1.3.6.1.4.1.12325.1.200.1.8.2.1.2","{#IFDESCR}"]'
key: 'net.if.in.pass.v4.bps[{#SNMPINDEX}]'
history: 7d
units: bps
description: |
MIB: BEGEMOT-PF-MIB
IPv4 bits per second passed coming in on this interface.
preprocessing:
- type: CHANGE_PER_SECOND
parameters:
- ''
- type: MULTIPLIER
parameters:
- '8'
tags:
- tag: component
value: firewall
- tag: component
value: network
- tag: description
value: '{#IFALIAS}'
- tag: interface
value: '{#IFNAME}'
- uuid: 367629501e4248e0b6de19e7123b0df6
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Inbound IPv4 packets passed'
type: SNMP_AGENT
snmp_oid: '.1.3.6.1.4.1.12325.1.200.1.8.2.1.11["index",".1.3.6.1.4.1.12325.1.200.1.8.2.1.2","{#IFDESCR}"]'
key: 'net.if.in.pass.v4.pps[{#SNMPINDEX}]'
history: 7d
units: pps
description: |
MIB: BEGEMOT-PF-MIB
The number of IPv4 packets passed coming in on this interface.
preprocessing:
- type: CHANGE_PER_SECOND
parameters:
- ''
tags:
- tag: component
value: firewall
- tag: component
value: network
- tag: description
value: '{#IFALIAS}'
- tag: interface
value: '{#IFNAME}'
- uuid: a21b0c97af544225971a6d0a2ddeaf2c
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Inbound IPv6 traffic passed'
type: SNMP_AGENT
snmp_oid: '.1.3.6.1.4.1.12325.1.200.1.8.2.1.15["index",".1.3.6.1.4.1.12325.1.200.1.8.2.1.2","{#IFDESCR}"]'
key: 'net.if.in.pass.v6.bps[{#SNMPINDEX}]'
history: 7d
units: bps
description: |
MIB: BEGEMOT-PF-MIB
IPv6 bits per second passed coming in on this interface.
preprocessing:
- type: CHANGE_PER_SECOND
parameters:
- ''
- type: MULTIPLIER
parameters:
- '8'
tags:
- tag: component
value: firewall
- tag: component
value: network
- tag: description
value: '{#IFALIAS}'
- tag: interface
value: '{#IFNAME}'
- uuid: 23daac718d7743248b4e9e5dd9d537bf
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Inbound IPv6 packets passed'
type: SNMP_AGENT
snmp_oid: '.1.3.6.1.4.1.12325.1.200.1.8.2.1.19["index",".1.3.6.1.4.1.12325.1.200.1.8.2.1.2","{#IFDESCR}"]'
key: 'net.if.in.pass.v6.pps[{#SNMPINDEX}]'
history: 7d
units: pps
description: |
MIB: BEGEMOT-PF-MIB
The number of IPv6 packets passed coming in on this interface.
preprocessing:
- type: CHANGE_PER_SECOND
parameters:
- ''
tags:
- tag: component
value: firewall
- tag: component
value: network
- tag: description
value: '{#IFALIAS}'
- tag: interface
value: '{#IFNAME}'
- uuid: df19df9d63604ec294a49478a0963da2
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Bits received'
type: SNMP_AGENT
snmp_oid: '1.3.6.1.2.1.31.1.1.1.6.{#SNMPINDEX}'
key: 'net.if.in[{#SNMPINDEX}]'
history: 7d
units: bps
description: |
MIB: IF-MIB
The total number of octets received on the interface, including framing characters. This object is a 64-bit version of ifInOctets. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
preprocessing:
- type: CHANGE_PER_SECOND
parameters:
- ''
- type: MULTIPLIER
parameters:
- '8'
tags:
- tag: component
value: network
- tag: description
value: '{#IFALIAS}'
- tag: interface
value: '{#IFNAME}'
- uuid: 0be1b473b51541c38012847e52ae9e1f
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Outbound IPv4 traffic blocked'
type: SNMP_AGENT
snmp_oid: '.1.3.6.1.4.1.12325.1.200.1.8.2.1.10["index",".1.3.6.1.4.1.12325.1.200.1.8.2.1.2","{#IFDESCR}"]'
key: 'net.if.out.block.v4.bps[{#SNMPINDEX}]'
history: 7d
units: bps
description: |
MIB: BEGEMOT-PF-MIB
IPv4 bits per second blocked going out on this interface.
preprocessing:
- type: CHANGE_PER_SECOND
parameters:
- ''
- type: MULTIPLIER
parameters:
- '8'
tags:
- tag: component
value: firewall
- tag: component
value: network
- tag: description
value: '{#IFALIAS}'
- tag: interface
value: '{#IFNAME}'
- uuid: 7f335123af85457cb5b8c43279f26b27
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Outbound IPv4 packets blocked'
type: SNMP_AGENT
snmp_oid: '.1.3.6.1.4.1.12325.1.200.1.8.2.1.14["index",".1.3.6.1.4.1.12325.1.200.1.8.2.1.2","{#IFDESCR}"]'
key: 'net.if.out.block.v4.pps[{#SNMPINDEX}]'
history: 7d
units: pps
description: |
MIB: BEGEMOT-PF-MIB
The number of IPv4 packets blocked going out on this interface.
preprocessing:
- type: CHANGE_PER_SECOND
parameters:
- ''
tags:
- tag: component
value: firewall
- tag: component
value: network
- tag: description
value: '{#IFALIAS}'
- tag: interface
value: '{#IFNAME}'
- uuid: dae11126c26543a7afd3c169fbc76cd5
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Outbound IPv6 traffic blocked'
type: SNMP_AGENT
snmp_oid: '.1.3.6.1.4.1.12325.1.200.1.8.2.1.18["index",".1.3.6.1.4.1.12325.1.200.1.8.2.1.2","{#IFDESCR}"]'
key: 'net.if.out.block.v6.bps[{#SNMPINDEX}]'
history: 7d
units: bps
description: |
MIB: BEGEMOT-PF-MIB
IPv6 bits per second blocked going out on this interface.
preprocessing:
- type: CHANGE_PER_SECOND
parameters:
- ''
- type: MULTIPLIER
parameters:
- '8'
tags:
- tag: component
value: firewall
- tag: component
value: network
- tag: description
value: '{#IFALIAS}'
- tag: interface
value: '{#IFNAME}'
- uuid: a877f2c800874ce9bbf972ef8eb277be
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Outbound IPv6 packets blocked'
type: SNMP_AGENT
snmp_oid: '.1.3.6.1.4.1.12325.1.200.1.8.2.1.22["index",".1.3.6.1.4.1.12325.1.200.1.8.2.1.2","{#IFDESCR}"]'
key: 'net.if.out.block.v6.pps[{#SNMPINDEX}]'
history: 7d
units: pps
description: |
MIB: BEGEMOT-PF-MIB
The number of IPv6 packets blocked going out on this interface.
preprocessing:
- type: CHANGE_PER_SECOND
parameters:
- ''
tags:
- tag: component
value: firewall
- tag: component
value: network
- tag: description
value: '{#IFALIAS}'
- tag: interface
value: '{#IFNAME}'
- uuid: d80bb6eac4ab43b58c6c785340b77494
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Outbound packets discarded'
type: SNMP_AGENT
snmp_oid: '1.3.6.1.2.1.2.2.1.19.{#SNMPINDEX}'
key: 'net.if.out.discards[{#SNMPINDEX}]'
history: 7d
description: |
MIB: IF-MIB
The number of outbound packets which were chosen to be discarded
even though no errors had been detected to prevent their being deliverable to a higher-layer protocol.
One possible reason for discarding such a packet could be to free up buffer space.
Discontinuities in the value of this counter can occur at re-initialization of the management system,
and at other times as indicated by the value of ifCounterDiscontinuityTime.
preprocessing:
- type: CHANGE_PER_SECOND
parameters:
- ''
tags:
- tag: component
value: network
- tag: description
value: '{#IFALIAS}'
- tag: interface
value: '{#IFNAME}'
- uuid: 357f0ab9a5814f06a04e5e2983226e26
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Outbound packets with errors'
type: SNMP_AGENT
snmp_oid: '1.3.6.1.2.1.2.2.1.20.{#SNMPINDEX}'
key: 'net.if.out.errors[{#SNMPINDEX}]'
history: 7d
description: |
MIB: IF-MIB
For packet-oriented interfaces, the number of outbound packets that contained errors preventing them from being deliverable to a higher-layer protocol. For character-oriented or fixed-length interfaces, the number of outbound transmission units that contained errors preventing them from being deliverable to a higher-layer protocol. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
preprocessing:
- type: CHANGE_PER_SECOND
parameters:
- ''
tags:
- tag: component
value: network
- tag: description
value: '{#IFALIAS}'
- tag: interface
value: '{#IFNAME}'
trigger_prototypes:
- uuid: 9d6dafdae44343f1a4e0934ec44da7b3
expression: 'min(/OPNsense by SNMP/net.if.out.errors[{#SNMPINDEX}],5m)>{$IF.ERRORS.WARN:"{#IFNAME}"}'
recovery_mode: RECOVERY_EXPRESSION
recovery_expression: 'max(/OPNsense by SNMP/net.if.out.errors[{#SNMPINDEX}],5m)<{$IF.ERRORS.WARN:"{#IFNAME}"}*0.8'
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: High output error rate'
event_name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: High output error rate ( > {$IF.ERRORS.WARN:"{#IFNAME}"} for 5m)'
opdata: 'errors out: {ITEM.LASTVALUE2}'
priority: WARNING
description: 'It recovers when it is below 80% of the `{$IF.ERRORS.WARN:"{#IFNAME}"}` threshold.'
dependencies:
- name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Link down'
expression: '{$IFCONTROL:"{#IFNAME}"}=1 and (last(/OPNsense by SNMP/net.if.status[{#SNMPINDEX}])=2)'
tags:
- tag: scope
value: availability
- uuid: be3ab46dc43d45da88917689e02b9f70
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Outbound IPv4 traffic passed'
type: SNMP_AGENT
snmp_oid: '.1.3.6.1.4.1.12325.1.200.1.8.2.1.9["index",".1.3.6.1.4.1.12325.1.200.1.8.2.1.2","{#IFDESCR}"]'
key: 'net.if.out.pass.v4.bps[{#SNMPINDEX}]'
history: 7d
units: bps
description: |
MIB: BEGEMOT-PF-MIB
IPv4 bits per second passed going out on this interface.
preprocessing:
- type: CHANGE_PER_SECOND
parameters:
- ''
- type: MULTIPLIER
parameters:
- '8'
tags:
- tag: component
value: firewall
- tag: component
value: network
- tag: description
value: '{#IFALIAS}'
- tag: interface
value: '{#IFNAME}'
- uuid: ec0b70c2c7d8452aaefefb737f567735
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Outbound IPv4 packets passed'
type: SNMP_AGENT
snmp_oid: '.1.3.6.1.4.1.12325.1.200.1.8.2.1.13["index",".1.3.6.1.4.1.12325.1.200.1.8.2.1.2","{#IFDESCR}"]'
key: 'net.if.out.pass.v4.pps[{#SNMPINDEX}]'
history: 7d
units: pps
description: |
MIB: BEGEMOT-PF-MIB
The number of IPv4 packets passed going out on this interface.
preprocessing:
- type: CHANGE_PER_SECOND
parameters:
- ''
tags:
- tag: component
value: firewall
- tag: component
value: network
- tag: description
value: '{#IFALIAS}'
- tag: interface
value: '{#IFNAME}'
- uuid: 993af213503d4cf8b921ed630a01e7f9
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Outbound IPv6 traffic passed'
type: SNMP_AGENT
snmp_oid: '.1.3.6.1.4.1.12325.1.200.1.8.2.1.17["index",".1.3.6.1.4.1.12325.1.200.1.8.2.1.2","{#IFDESCR}"]'
key: 'net.if.out.pass.v6.bps[{#SNMPINDEX}]'
history: 7d
units: bps
description: |
MIB: BEGEMOT-PF-MIB
IPv6 bits per second passed going out on this interface.
preprocessing:
- type: CHANGE_PER_SECOND
parameters:
- ''
- type: MULTIPLIER
parameters:
- '8'
tags:
- tag: component
value: firewall
- tag: component
value: network
- tag: description
value: '{#IFALIAS}'
- tag: interface
value: '{#IFNAME}'
- uuid: d4c3d02a4e024d1a881789f9588c05f7
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Outbound IPv6 packets passed'
type: SNMP_AGENT
snmp_oid: '.1.3.6.1.4.1.12325.1.200.1.8.2.1.21["index",".1.3.6.1.4.1.12325.1.200.1.8.2.1.2","{#IFDESCR}"]'
key: 'net.if.out.pass.v6.pps[{#SNMPINDEX}]'
history: 7d
units: pps
description: |
MIB: BEGEMOT-PF-MIB
The number of IPv6 packets passed going out on this interface.
preprocessing:
- type: CHANGE_PER_SECOND
parameters:
- ''
tags:
- tag: component
value: firewall
- tag: component
value: network
- tag: description
value: '{#IFALIAS}'
- tag: interface
value: '{#IFNAME}'
- uuid: 1f6a8e8f3cc746249001293fba59fcf3
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Bits sent'
type: SNMP_AGENT
snmp_oid: '1.3.6.1.2.1.31.1.1.1.10.{#SNMPINDEX}'
key: 'net.if.out[{#SNMPINDEX}]'
history: 7d
units: bps
description: |
MIB: IF-MIB
The total number of octets transmitted out of the interface, including framing characters. This object is a 64-bit version of ifOutOctets.Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
preprocessing:
- type: CHANGE_PER_SECOND
parameters:
- ''
- type: MULTIPLIER
parameters:
- '8'
tags:
- tag: component
value: network
- tag: description
value: '{#IFALIAS}'
- tag: interface
value: '{#IFNAME}'
- uuid: bce50f45634d41b6a4ab8616e3a4d804
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Rules references count'
type: SNMP_AGENT
snmp_oid: '.1.3.6.1.4.1.12325.1.200.1.8.2.1.6["index",".1.3.6.1.4.1.12325.1.200.1.8.2.1.2","{#IFDESCR}"]'
key: 'net.if.rules.refs[{#SNMPINDEX}]'
history: 7d
description: |
MIB: BEGEMOT-PF-MIB
The number of rules referencing this interface.
tags:
- tag: component
value: firewall
- tag: component
value: network
- tag: description
value: '{#IFALIAS}'
- tag: interface
value: '{#IFNAME}'
- uuid: 76c91001f4b64ba99c132c3dd476cb88
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Speed'
type: SNMP_AGENT
snmp_oid: '1.3.6.1.2.1.31.1.1.1.15.{#SNMPINDEX}'
key: 'net.if.speed[{#SNMPINDEX}]'
history: 7d
units: bps
description: |
MIB: IF-MIB
An estimate of the interface's current bandwidth in units of 1,000,000 bits per second. If this object reports a value of `n' then the speed of the interface is somewhere in the range of `n-500,000' to`n+499,999'. For interfaces which do not vary in bandwidth or for those where no accurate estimation can be made, this object should contain the nominal bandwidth. For a sub-layer which has no concept of bandwidth, this object should be zero.
preprocessing:
- type: MULTIPLIER
parameters:
- '1000000'
- type: DISCARD_UNCHANGED_HEARTBEAT
parameters:
- 1h
tags:
- tag: component
value: network
- tag: description
value: '{#IFALIAS}'
- tag: interface
value: '{#IFNAME}'
- uuid: 1b352c1f96e84f2fb72c6414c0e15b29
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Operational status'
type: SNMP_AGENT
snmp_oid: '1.3.6.1.2.1.2.2.1.8.{#SNMPINDEX}'
key: 'net.if.status[{#SNMPINDEX}]'
history: 7d
description: |
MIB: IF-MIB
The current operational state of the interface.
- The testing(3) state indicates that no operational packet scan be passed
- If ifAdminStatus is down(2) then ifOperStatus should be down(2)
- If ifAdminStatus is changed to up(1) then ifOperStatus should change to up(1) if the interface is ready to transmit and receive network traffic
- It should change todormant(5) if the interface is waiting for external actions (such as a serial line waiting for an incoming connection)
- It should remain in the down(2) state if and only if there is a fault that prevents it from going to the up(1) state
- It should remain in the notPresent(6) state if the interface has missing(typically, hardware) components.
valuemap:
name: 'IF-MIB::ifOperStatus'
preprocessing:
- type: DISCARD_UNCHANGED_HEARTBEAT
parameters:
- 6h
tags:
- tag: component
value: network
- tag: description
value: '{#IFALIAS}'
- tag: interface
value: '{#IFNAME}'
trigger_prototypes:
- uuid: 4a189b213b8e40589be007367361d70e
expression: '{$IFCONTROL:"{#IFNAME}"}=1 and (last(/OPNsense by SNMP/net.if.status[{#SNMPINDEX}])=2)'
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Link down'
opdata: 'Current state: {ITEM.LASTVALUE1}'
priority: AVERAGE
description: |
This trigger expression works as follows:
1. It can be triggered if the operations status is down.
2. `{$IFCONTROL:"{#IFNAME}"}=1` - a user can redefine context macro to value - 0. That marks this interface as not important. No new trigger will be fired if this interface is down.
tags:
- tag: scope
value: availability
- uuid: 2874d024da724dc687d0d8fa940fcf87
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Interface type'
type: SNMP_AGENT
snmp_oid: '1.3.6.1.2.1.2.2.1.3.{#SNMPINDEX}'
key: 'net.if.type[{#SNMPINDEX}]'
history: 7d
description: |
MIB: IF-MIB
The type of interface.
Additional values for ifType are assigned by the Internet Assigned Numbers Authority (IANA),
through updating the syntax of the IANAifType textual convention.
valuemap:
name: 'IF-MIB::ifType'
preprocessing:
- type: DISCARD_UNCHANGED_HEARTBEAT
parameters:
- 6h
tags:
- tag: component
value: network
- tag: description
value: '{#IFALIAS}'
- tag: interface
value: '{#IFNAME}'
trigger_prototypes:
- uuid: e351276dfe6a43db88bdb437d2ef4a8e
expression: |
change(/OPNsense by SNMP/net.if.speed[{#SNMPINDEX}])<0 and last(/OPNsense by SNMP/net.if.speed[{#SNMPINDEX}])>0
and (
last(/OPNsense by SNMP/net.if.type[{#SNMPINDEX}])=6 or
last(/OPNsense by SNMP/net.if.type[{#SNMPINDEX}])=7 or
last(/OPNsense by SNMP/net.if.type[{#SNMPINDEX}])=11 or
last(/OPNsense by SNMP/net.if.type[{#SNMPINDEX}])=62 or
last(/OPNsense by SNMP/net.if.type[{#SNMPINDEX}])=69 or
last(/OPNsense by SNMP/net.if.type[{#SNMPINDEX}])=117
)
and
(last(/OPNsense by SNMP/net.if.status[{#SNMPINDEX}])<>2)
recovery_mode: RECOVERY_EXPRESSION
recovery_expression: |
(change(/OPNsense by SNMP/net.if.speed[{#SNMPINDEX}])>0 and last(/OPNsense by SNMP/net.if.speed[{#SNMPINDEX}],#2)>0) or
(last(/OPNsense by SNMP/net.if.status[{#SNMPINDEX}])=2)
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Ethernet has changed to lower speed than it was before'
opdata: 'Current reported speed: {ITEM.LASTVALUE1}'
priority: INFO
description: 'This Ethernet connection has transitioned down from its known maximum speed. This might be a sign of autonegotiation issues. Acknowledge to close the problem manually.'
dependencies:
- name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Link down'
expression: '{$IFCONTROL:"{#IFNAME}"}=1 and (last(/OPNsense by SNMP/net.if.status[{#SNMPINDEX}])=2)'
tags:
- tag: scope
value: capacity
- uuid: d9a23c4dee9c4fd0862748923d656023
expression: |
(avg(/OPNsense by SNMP/net.if.in[{#SNMPINDEX}],15m)>({$IF.UTIL.MAX:"{#IFNAME}"}/100)*last(/OPNsense by SNMP/net.if.speed[{#SNMPINDEX}])) and
last(/OPNsense by SNMP/net.if.speed[{#SNMPINDEX}])>0
recovery_mode: RECOVERY_EXPRESSION
recovery_expression: 'avg(/OPNsense by SNMP/net.if.in[{#SNMPINDEX}],15m)<(({$IF.UTIL.MAX:"{#IFNAME}"}-3)/100)*last(/OPNsense by SNMP/net.if.speed[{#SNMPINDEX}])'
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: High inbound bandwidth usage'
event_name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: High inbound bandwidth usage ( > {$IF.UTIL.MAX:"{#IFNAME}"}% )'
opdata: 'In: {ITEM.LASTVALUE1}, speed: {ITEM.LASTVALUE2}'
priority: WARNING
description: 'The utilization of the network interface is close to its estimated maximum bandwidth.'
dependencies:
- name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Link down'
expression: '{$IFCONTROL:"{#IFNAME}"}=1 and (last(/OPNsense by SNMP/net.if.status[{#SNMPINDEX}])=2)'
tags:
- tag: scope
value: performance
- uuid: 4c120cefd9dd4f8aa257023610b3ed19
expression: |
(avg(/OPNsense by SNMP/net.if.out[{#SNMPINDEX}],15m)>({$IF.UTIL.MAX:"{#IFNAME}"}/100)*last(/OPNsense by SNMP/net.if.speed[{#SNMPINDEX}])) and
last(/OPNsense by SNMP/net.if.speed[{#SNMPINDEX}])>0
recovery_mode: RECOVERY_EXPRESSION
recovery_expression: 'avg(/OPNsense by SNMP/net.if.out[{#SNMPINDEX}],15m)<(({$IF.UTIL.MAX:"{#IFNAME}"}-3)/100)*last(/OPNsense by SNMP/net.if.speed[{#SNMPINDEX}])'
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: High outbound bandwidth usage'
event_name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: High outbound bandwidth usage ( > {$IF.UTIL.MAX:"{#IFNAME}"}% )'
opdata: 'Out: {ITEM.LASTVALUE1}, speed: {ITEM.LASTVALUE2}'
priority: WARNING
description: 'The utilization of the network interface is close to its estimated maximum bandwidth.'
dependencies:
- name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Link down'
expression: '{$IFCONTROL:"{#IFNAME}"}=1 and (last(/OPNsense by SNMP/net.if.status[{#SNMPINDEX}])=2)'
tags:
- tag: scope
value: performance
graph_prototypes:
- uuid: d9c786ac274149ac9145499a85d25c35
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Inbound packet filter traffic'
graph_items:
- color: 1A7C11
item:
host: 'OPNsense by SNMP'
key: 'net.if.in.pass.v4.bps[{#SNMPINDEX}]'
- sortorder: '1'
color: F63100
item:
host: 'OPNsense by SNMP'
key: 'net.if.in.block.v4.bps[{#SNMPINDEX}]'
- sortorder: '2'
color: 2774A4
item:
host: 'OPNsense by SNMP'
key: 'net.if.in.pass.v6.bps[{#SNMPINDEX}]'
- sortorder: '3'
color: A54F10
item:
host: 'OPNsense by SNMP'
key: 'net.if.in.block.v6.bps[{#SNMPINDEX}]'
- sortorder: '4'
color: 6C59DC
yaxisside: RIGHT
item:
host: 'OPNsense by SNMP'
key: 'net.if.in.pass.v4.pps[{#SNMPINDEX}]'
- sortorder: '5'
color: FC6EA3
yaxisside: RIGHT
item:
host: 'OPNsense by SNMP'
key: 'net.if.in.block.v4.pps[{#SNMPINDEX}]'
- sortorder: '6'
color: AC8C14
yaxisside: RIGHT
item:
host: 'OPNsense by SNMP'
key: 'net.if.in.pass.v6.pps[{#SNMPINDEX}]'
- sortorder: '7'
color: 611F27
yaxisside: RIGHT
item:
host: 'OPNsense by SNMP'
key: 'net.if.in.block.v6.pps[{#SNMPINDEX}]'
- uuid: ab44b919a9d94955b27bf9a4499e4bf5
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Network traffic'
graph_items:
- drawtype: GRADIENT_LINE
color: 1A7C11
item:
host: 'OPNsense by SNMP'
key: 'net.if.in[{#SNMPINDEX}]'
- sortorder: '1'
drawtype: BOLD_LINE
color: 2774A4
item:
host: 'OPNsense by SNMP'
key: 'net.if.out[{#SNMPINDEX}]'
- sortorder: '2'
color: F63100
yaxisside: RIGHT
item:
host: 'OPNsense by SNMP'
key: 'net.if.out.errors[{#SNMPINDEX}]'
- sortorder: '3'
color: A54F10
yaxisside: RIGHT
item:
host: 'OPNsense by SNMP'
key: 'net.if.in.errors[{#SNMPINDEX}]'
- sortorder: '4'
color: FC6EA3
yaxisside: RIGHT
item:
host: 'OPNsense by SNMP'
key: 'net.if.out.discards[{#SNMPINDEX}]'
- sortorder: '5'
color: 6C59DC
yaxisside: RIGHT
item:
host: 'OPNsense by SNMP'
key: 'net.if.in.discards[{#SNMPINDEX}]'
- uuid: 21b603de7402416fb2f472e56010f5f6
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Outbound packet filter traffic'
graph_items:
- color: 1A7C11
item:
host: 'OPNsense by SNMP'
key: 'net.if.out.pass.v4.bps[{#SNMPINDEX}]'
- sortorder: '1'
color: F63100
item:
host: 'OPNsense by SNMP'
key: 'net.if.out.block.v4.bps[{#SNMPINDEX}]'
- sortorder: '2'
color: 2774A4
item:
host: 'OPNsense by SNMP'
key: 'net.if.out.pass.v6.bps[{#SNMPINDEX}]'
- sortorder: '3'
color: A54F10
item:
host: 'OPNsense by SNMP'
key: 'net.if.out.block.v6.bps[{#SNMPINDEX}]'
- sortorder: '4'
color: 6C59DC
yaxisside: RIGHT
item:
host: 'OPNsense by SNMP'
key: 'net.if.out.pass.v4.pps[{#SNMPINDEX}]'
- sortorder: '5'
color: FC6EA3
yaxisside: RIGHT
item:
host: 'OPNsense by SNMP'
key: 'net.if.out.block.v4.pps[{#SNMPINDEX}]'
- sortorder: '6'
color: AC8C14
yaxisside: RIGHT
item:
host: 'OPNsense by SNMP'
key: 'net.if.out.pass.v6.pps[{#SNMPINDEX}]'
- sortorder: '7'
color: 611F27
yaxisside: RIGHT
item:
host: 'OPNsense by SNMP'
key: 'net.if.out.block.v6.pps[{#SNMPINDEX}]'
tags:
- tag: class
value: software
- tag: target
value: opnsense
macros:
- macro: '{$IF.ERRORS.WARN}'
value: '2'
description: 'Threshold of error packets rate for warning trigger. Can be used with interface name as context.'
- macro: '{$IF.UTIL.MAX}'
value: '90'
description: 'Threshold of interface bandwidth utilization for warning trigger in %. Can be used with interface name as context.'
- macro: '{$IFCONTROL}'
value: '1'
description: 'Macro for operational state of the interface for link down trigger. Can be used with interface name as context.'
- macro: '{$NET.IF.IFADMINSTATUS.MATCHES}'
value: '^.*'
description: 'This macro is used in filters of network interfaces discovery rule.'
- macro: '{$NET.IF.IFADMINSTATUS.NOT_MATCHES}'
value: ^2$
description: 'Ignore down(2) administrative status.'
- macro: '{$NET.IF.IFALIAS.MATCHES}'
value: '.*'
description: 'This macro is used in filters of network interfaces discovery rule.'
- macro: '{$NET.IF.IFALIAS.NOT_MATCHES}'
value: CHANGE_IF_NEEDED
description: 'This macro is used in filters of network interfaces discovery rule.'
- macro: '{$NET.IF.IFDESCR.MATCHES}'
value: '.*'
description: 'This macro is used in filters of network interfaces discovery rule.'
- macro: '{$NET.IF.IFDESCR.NOT_MATCHES}'
value: CHANGE_IF_NEEDED
description: 'This macro is used in filters of network interfaces discovery rule.'
- macro: '{$NET.IF.IFNAME.NOT_MATCHES}'
value: '(^pflog[0-9.]*$|^pfsync[0-9.]*$)'
description: 'This macro is used in filters of network interfaces discovery rule.'
- macro: '{$NET.IF.IFOPERSTATUS.MATCHES}'
value: '^.*$'
description: 'This macro is used in filters of network interfaces discovery rule.'
- macro: '{$NET.IF.IFOPERSTATUS.NOT_MATCHES}'
value: ^6$
description: 'Ignore notPresent(6).'
- macro: '{$NET.IF.IFTYPE.MATCHES}'
value: '.*'
description: 'This macro is used in filters of network interfaces discovery rule.'
- macro: '{$NET.IF.IFTYPE.NOT_MATCHES}'
value: CHANGE_IF_NEEDED
description: 'This macro is used in filters of network interfaces discovery rule.'
- macro: '{$SNMP.TIMEOUT}'
value: 5m
description: 'The time interval for SNMP availability trigger.'
- macro: '{$SOURCE.TRACKING.TABLE.UTIL.MAX}'
value: '90'
description: 'Threshold of source tracking table utilization trigger in %.'
- macro: '{$STATE.TABLE.UTIL.MAX}'
value: '90'
description: 'Threshold of state table utilization trigger in %.'
dashboards:
- uuid: 8504c5b2ef0848aa972ef39258de6857
name: 'OPNsense: Overview'
pages:
- name: 'Packet filter'
widgets:
- type: graph
width: '24'
height: '10'
fields:
- type: GRAPH
name: graphid
value:
host: 'OPNsense by SNMP'
name: 'OPNsense: Packet filter reason codes'
- name: 'Network traffic'
widgets:
- type: graphprototype
width: '24'
height: '10'
fields:
- type: INTEGER
name: columns
value: '1'
- type: INTEGER
name: rows
value: '1'
- type: GRAPH_PROTOTYPE
name: graphid
value:
host: 'OPNsense by SNMP'
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Inbound packet filter traffic'
- type: graphprototype
'y': '10'
width: '24'
height: '10'
fields:
- type: INTEGER
name: columns
value: '1'
- type: INTEGER
name: rows
value: '1'
- type: GRAPH_PROTOTYPE
name: graphid
value:
host: 'OPNsense by SNMP'
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Outbound packet filter traffic'
- type: graphprototype
'y': '20'
width: '24'
height: '10'
fields:
- type: INTEGER
name: columns
value: '1'
- type: INTEGER
name: rows
value: '1'
- type: GRAPH_PROTOTYPE
name: graphid
value:
host: 'OPNsense by SNMP'
name: 'OPNsense: Interface [{#IFNAME}({#IFALIAS})]: Network traffic'
valuemaps:
- uuid: b556be6037b449139eab7830cdab494a
name: 'IF-MIB::ifOperStatus'
mappings:
- value: '1'
newvalue: up
- value: '2'
newvalue: down
- value: '3'
newvalue: testing
- value: '4'
newvalue: unknown
- value: '5'
newvalue: dormant
- value: '6'
newvalue: notPresent
- value: '7'
newvalue: lowerLayerDown
- uuid: c9a24f17cf8243feb44825d707132180
name: 'IF-MIB::ifType'
mappings:
- value: '1'
newvalue: other
- value: '2'
newvalue: regular1822
- value: '3'
newvalue: hdh1822
- value: '4'
newvalue: ddnX25
- value: '5'
newvalue: rfc877x25
- value: '6'
newvalue: ethernetCsmacd
- value: '7'
newvalue: iso88023Csmacd
- value: '8'
newvalue: iso88024TokenBus
- value: '9'
newvalue: iso88025TokenRing
- value: '10'
newvalue: iso88026Man
- value: '11'
newvalue: starLan
- value: '12'
newvalue: proteon10Mbit
- value: '13'
newvalue: proteon80Mbit
- value: '14'
newvalue: hyperchannel
- value: '15'
newvalue: fddi
- value: '16'
newvalue: lapb
- value: '17'
newvalue: sdlc
- value: '18'
newvalue: ds1
- value: '19'
newvalue: e1
- value: '20'
newvalue: basicISDN
- value: '21'
newvalue: primaryISDN
- value: '22'
newvalue: propPointToPointSerial
- value: '23'
newvalue: ppp
- value: '24'
newvalue: softwareLoopback
- value: '25'
newvalue: eon
- value: '26'
newvalue: ethernet3Mbit
- value: '27'
newvalue: nsip
- value: '28'
newvalue: slip
- value: '29'
newvalue: ultra
- value: '30'
newvalue: ds3
- value: '31'
newvalue: sip
- value: '32'
newvalue: frameRelay
- value: '33'
newvalue: rs232
- value: '34'
newvalue: para
- value: '35'
newvalue: arcnet
- value: '36'
newvalue: arcnetPlus
- value: '37'
newvalue: atm
- value: '38'
newvalue: miox25
- value: '39'
newvalue: sonet
- value: '40'
newvalue: x25ple
- value: '41'
newvalue: iso88022llc
- value: '42'
newvalue: localTalk
- value: '43'
newvalue: smdsDxi
- value: '44'
newvalue: frameRelayService
- value: '45'
newvalue: v35
- value: '46'
newvalue: hssi
- value: '47'
newvalue: hippi
- value: '48'
newvalue: modem
- value: '49'
newvalue: aal5
- value: '50'
newvalue: sonetPath
- value: '51'
newvalue: sonetVT
- value: '52'
newvalue: smdsIcip
- value: '53'
newvalue: propVirtual
- value: '54'
newvalue: propMultiplexor
- value: '55'
newvalue: ieee80212
- value: '56'
newvalue: fibreChannel
- value: '57'
newvalue: hippiInterface
- value: '58'
newvalue: frameRelayInterconnect
- value: '59'
newvalue: aflane8023
- value: '60'
newvalue: aflane8025
- value: '61'
newvalue: cctEmul
- value: '62'
newvalue: fastEther
- value: '63'
newvalue: isdn
- value: '64'
newvalue: v11
- value: '65'
newvalue: v36
- value: '66'
newvalue: g703at64k
- value: '67'
newvalue: g703at2mb
- value: '68'
newvalue: qllc
- value: '69'
newvalue: fastEtherFX
- value: '70'
newvalue: channel
- value: '71'
newvalue: ieee80211
- value: '72'
newvalue: ibm370parChan
- value: '73'
newvalue: escon
- value: '74'
newvalue: dlsw
- value: '75'
newvalue: isdns
- value: '76'
newvalue: isdnu
- value: '77'
newvalue: lapd
- value: '78'
newvalue: ipSwitch
- value: '79'
newvalue: rsrb
- value: '80'
newvalue: atmLogical
- value: '81'
newvalue: ds0
- value: '82'
newvalue: ds0Bundle
- value: '83'
newvalue: bsc
- value: '84'
newvalue: async
- value: '85'
newvalue: cnr
- value: '86'
newvalue: iso88025Dtr
- value: '87'
newvalue: eplrs
- value: '88'
newvalue: arap
- value: '89'
newvalue: propCnls
- value: '90'
newvalue: hostPad
- value: '91'
newvalue: termPad
- value: '92'
newvalue: frameRelayMPI
- value: '93'
newvalue: x213
- value: '94'
newvalue: adsl
- value: '95'
newvalue: radsl
- value: '96'
newvalue: sdsl
- value: '97'
newvalue: vdsl
- value: '98'
newvalue: iso88025CRFPInt
- value: '99'
newvalue: myrinet
- value: '100'
newvalue: voiceEM
- value: '101'
newvalue: voiceFXO
- value: '102'
newvalue: voiceFXS
- value: '103'
newvalue: voiceEncap
- value: '104'
newvalue: voiceOverIp
- value: '105'
newvalue: atmDxi
- value: '106'
newvalue: atmFuni
- value: '107'
newvalue: atmIma
- value: '108'
newvalue: pppMultilinkBundle
- value: '109'
newvalue: ipOverCdlc
- value: '110'
newvalue: ipOverClaw
- value: '111'
newvalue: stackToStack
- value: '112'
newvalue: virtualIpAddress
- value: '113'
newvalue: mpc
- value: '114'
newvalue: ipOverAtm
- value: '115'
newvalue: iso88025Fiber
- value: '116'
newvalue: tdlc
- value: '117'
newvalue: gigabitEthernet
- value: '118'
newvalue: hdlc
- value: '119'
newvalue: lapf
- value: '120'
newvalue: v37
- value: '121'
newvalue: x25mlp
- value: '122'
newvalue: x25huntGroup
- value: '123'
newvalue: trasnpHdlc
- value: '124'
newvalue: interleave
- value: '125'
newvalue: fast
- value: '126'
newvalue: ip
- value: '127'
newvalue: docsCableMaclayer
- value: '128'
newvalue: docsCableDownstream
- value: '129'
newvalue: docsCableUpstream
- value: '130'
newvalue: a12MppSwitch
- value: '131'
newvalue: tunnel
- value: '132'
newvalue: coffee
- value: '133'
newvalue: ces
- value: '134'
newvalue: atmSubInterface
- value: '135'
newvalue: l2vlan
- value: '136'
newvalue: l3ipvlan
- value: '137'
newvalue: l3ipxvlan
- value: '138'
newvalue: digitalPowerline
- value: '139'
newvalue: mediaMailOverIp
- value: '140'
newvalue: dtm
- value: '141'
newvalue: dcn
- value: '142'
newvalue: ipForward
- value: '143'
newvalue: msdsl
- value: '144'
newvalue: ieee1394
- value: '145'
newvalue: if-gsn
- value: '146'
newvalue: dvbRccMacLayer
- value: '147'
newvalue: dvbRccDownstream
- value: '148'
newvalue: dvbRccUpstream
- value: '149'
newvalue: atmVirtual
- value: '150'
newvalue: mplsTunnel
- value: '151'
newvalue: srp
- value: '152'
newvalue: voiceOverAtm
- value: '153'
newvalue: voiceOverFrameRelay
- value: '154'
newvalue: idsl
- value: '155'
newvalue: compositeLink
- value: '156'
newvalue: ss7SigLink
- value: '157'
newvalue: propWirelessP2P
- value: '158'
newvalue: frForward
- value: '159'
newvalue: rfc1483
- value: '160'
newvalue: usb
- value: '161'
newvalue: ieee8023adLag
- value: '162'
newvalue: bgppolicyaccounting
- value: '163'
newvalue: frf16MfrBundle
- value: '164'
newvalue: h323Gatekeeper
- value: '165'
newvalue: h323Proxy
- value: '166'
newvalue: mpls
- value: '167'
newvalue: mfSigLink
- value: '168'
newvalue: hdsl2
- value: '169'
newvalue: shdsl
- value: '170'
newvalue: ds1FDL
- value: '171'
newvalue: pos
- value: '172'
newvalue: dvbAsiIn
- value: '173'
newvalue: dvbAsiOut
- value: '174'
newvalue: plc
- value: '175'
newvalue: nfas
- value: '176'
newvalue: tr008
- value: '177'
newvalue: gr303RDT
- value: '178'
newvalue: gr303IDT
- value: '179'
newvalue: isup
- value: '180'
newvalue: propDocsWirelessMaclayer
- value: '181'
newvalue: propDocsWirelessDownstream
- value: '182'
newvalue: propDocsWirelessUpstream
- value: '183'
newvalue: hiperlan2
- value: '184'
newvalue: propBWAp2Mp
- value: '185'
newvalue: sonetOverheadChannel
- value: '186'
newvalue: digitalWrapperOverheadChannel
- value: '187'
newvalue: aal2
- value: '188'
newvalue: radioMAC
- value: '189'
newvalue: atmRadio
- value: '190'
newvalue: imt
- value: '191'
newvalue: mvl
- value: '192'
newvalue: reachDSL
- value: '193'
newvalue: frDlciEndPt
- value: '194'
newvalue: atmVciEndPt
- value: '195'
newvalue: opticalChannel
- value: '196'
newvalue: opticalTransport
- value: '197'
newvalue: propAtm
- value: '198'
newvalue: voiceOverCable
- value: '199'
newvalue: infiniband
- value: '200'
newvalue: teLink
- value: '201'
newvalue: q2931
- value: '202'
newvalue: virtualTg
- value: '203'
newvalue: sipTg
- value: '204'
newvalue: sipSig
- value: '205'
newvalue: docsCableUpstreamChannel
- value: '206'
newvalue: econet
- value: '207'
newvalue: pon155
- value: '208'
newvalue: pon622
- value: '209'
newvalue: bridge
- value: '210'
newvalue: linegroup
- value: '211'
newvalue: voiceEMFGD
- value: '212'
newvalue: voiceFGDEANA
- value: '213'
newvalue: voiceDID
- value: '214'
newvalue: mpegTransport
- value: '215'
newvalue: sixToFour
- value: '216'
newvalue: gtp
- value: '217'
newvalue: pdnEtherLoop1
- value: '218'
newvalue: pdnEtherLoop2
- value: '219'
newvalue: opticalChannelGroup
- value: '220'
newvalue: homepna
- value: '221'
newvalue: gfp
- value: '222'
newvalue: ciscoISLvlan
- value: '223'
newvalue: actelisMetaLOOP
- value: '224'
newvalue: fcipLink
- value: '225'
newvalue: rpr
- value: '226'
newvalue: qam
- value: '227'
newvalue: lmp
- value: '228'
newvalue: cblVectaStar
- value: '229'
newvalue: docsCableMCmtsDownstream
- value: '230'
newvalue: adsl2
- value: '231'
newvalue: macSecControlledIF
- value: '232'
newvalue: macSecUncontrolledIF
- value: '233'
newvalue: aviciOpticalEther
- value: '234'
newvalue: atmbond
- value: '235'
newvalue: voiceFGDOS
- value: '236'
newvalue: mocaVersion1
- value: '237'
newvalue: ieee80216WMAN
- value: '238'
newvalue: adsl2plus
- value: '239'
newvalue: dvbRcsMacLayer
- value: '240'
newvalue: dvbTdm
- value: '241'
newvalue: dvbRcsTdma
- value: '242'
newvalue: x86Laps
- value: '243'
newvalue: wwanPP
- value: '244'
newvalue: wwanPP2
- value: '245'
newvalue: voiceEBS
- value: '246'
newvalue: ifPwType
- value: '247'
newvalue: ilan
- value: '248'
newvalue: pip
- value: '249'
newvalue: aluELP
- value: '250'
newvalue: gpon
- value: '251'
newvalue: vdsl2
- value: '252'
newvalue: capwapDot11Profile
- value: '253'
newvalue: capwapDot11Bss
- value: '254'
newvalue: capwapWtpVirtualRadio
- value: '255'
newvalue: bits
- value: '256'
newvalue: docsCableUpstreamRfPort
- value: '257'
newvalue: cableDownstreamRfPort
- value: '258'
newvalue: vmwareVirtualNic
- value: '259'
newvalue: ieee802154
- value: '260'
newvalue: otnOdu
- value: '261'
newvalue: otnOtu
- value: '262'
newvalue: ifVfiType
- value: '263'
newvalue: g9981
- value: '264'
newvalue: g9982
- value: '265'
newvalue: g9983
- value: '266'
newvalue: aluEpon
- value: '267'
newvalue: aluEponOnu
- value: '268'
newvalue: aluEponPhysicalUni
- value: '269'
newvalue: aluEponLogicalLink
- value: '270'
newvalue: aluGponOnu
- value: '271'
newvalue: aluGponPhysicalUni
- value: '272'
newvalue: vmwareNicTeam
- value: '277'
newvalue: docsOfdmDownstream
- value: '278'
newvalue: docsOfdmaUpstream
- value: '279'
newvalue: gfast
- value: '280'
newvalue: sdci
- value: '281'
newvalue: xboxWireless
- value: '282'
newvalue: fastdsl
- value: '283'
newvalue: docsCableScte55d1FwdOob
- value: '284'
newvalue: docsCableScte55d1RetOob
- value: '285'
newvalue: docsCableScte55d2DsOob
- value: '286'
newvalue: docsCableScte55d2UsOob
- value: '287'
newvalue: docsCableNdf
- value: '288'
newvalue: docsCableNdr
- value: '289'
newvalue: ptm
- value: '290'
newvalue: ghn
- uuid: 0cb987b54d4243009aeae0454d0c059e
name: 'Services status'
mappings:
- value: '0'
newvalue: 'not running'
- value: '2'
newvalue: running
- uuid: 1e5ba7a78b5843f0a97edc51eaa96778
name: 'SNMPv2-TC::TruthValue'
mappings:
- value: '1'
newvalue: 'true'
- value: '2'
newvalue: 'false'
- uuid: 187ea1eb9cdb4f52bf5a6651820024a9
name: zabbix.host.available
mappings:
- value: '0'
newvalue: 'not available'
- value: '1'
newvalue: available
- value: '2'
newvalue: unknown
graphs:
- uuid: 45c34572c76f4128a3aa779a4ccda241
name: 'OPNsense: Packet filter reason codes'
type: STACKED
ymin_type_1: FIXED
graph_items:
- color: 199C0D
item:
host: 'OPNsense by SNMP'
key: opnsense.packets.match
- sortorder: '1'
color: F63100
item:
host: 'OPNsense by SNMP'
key: opnsense.packets.bad.offset
- sortorder: '2'
color: 00611C
item:
host: 'OPNsense by SNMP'
key: opnsense.packets.fragment
- sortorder: '3'
color: F7941D
item:
host: 'OPNsense by SNMP'
key: opnsense.packets.short
- sortorder: '4'
color: FC6EA3
item:
host: 'OPNsense by SNMP'
key: opnsense.packets.normalize
- sortorder: '5'
color: 6C59DC
item:
host: 'OPNsense by SNMP'
key: opnsense.packets.mem.drop