5.02021-11-25T12:37:59ZTemplatesTemplates/ModulesSophos XG FW 18 SNMPv2Sophos XG FW 18 SNMPv2Template Module Generic SNMPTemplate Module HOST-RESOURCES-MIB CPU SNMPTemplate Module Interfaces SNMPTemplatesAlertsInventoryLicenseMemoryServicesStatistic- Service apache statusSNMP_AGENTSFOS-FIREWALL-MIB::sfosApacheService.0apacheService5m2w0ServicesSOPHOS SFOS-FIREWALL-MIB::serviceStatus{last()}<>3Service apache status is not runningAVERAGE
- Device serial numberSNMP_AGENTSFOS-FIREWALL-MIB::sfosDeviceAppKey.0applianceKey1h2w0CHARInventory
- Device nameSNMP_AGENTSFOS-FIREWALL-MIB::sfosDeviceName.0applianceName1h2w0CHARInventory
- Device typeSNMP_AGENTSFOS-FIREWALL-MIB::sfosDeviceType.0applianceType1h2w0CHARInventory
- Service AS statusSNMP_AGENTSFOS-FIREWALL-MIB::sfosASService.0asService5m2w0ServicesSOPHOS SFOS-FIREWALL-MIB::serviceStatus{last()}<>3 and {last()}<>7Service as status is not runningAVERAGE
- Service AV statusSNMP_AGENTSFOS-FIREWALL-MIB::sfosAVService.0avService5m2w0ServicesSOPHOS SFOS-FIREWALL-MIB::serviceStatus{last()}<>3Service av status is not runningAVERAGE
- Base license expire dateSNMP_AGENTSFOS-FIREWALL-MIB::sfosBaseFWLicExpiryDate.0baseFWLicExpiryDate1h2w0TEXTBase Firewall protection license expiry date.License
- Base license reg statusSNMP_AGENTSFOS-FIREWALL-MIB::sfosBaseFWLicRegStatus.0baseFWLicRegStatus1h2wBase Firewall protection license status.LicenseSOPHOS SFOS-FIREWALL-MIB::subscriptionStatusType
- HA current statusSNMP_AGENTSFOS-FIREWALL-MIB::sfosDeviceCurrentHAState.0currentHAStatus5m45d150dTextual Convention: HaStatus
Values: notapplicable( 0 ), auxiliary( 1 ), standAlone( 2 ), primary( 3 ), faulty( 4 ), ready ( 5 )StatusSOPHOS SFOS-FIREWALL-MIB::haStatus
- Service database statusSNMP_AGENTSFOS-FIREWALL-MIB::sfosDatabaseservice.0databaseService5m2w0ServicesSOPHOS SFOS-FIREWALL-MIB::serviceStatus{last()}<>3Service database status is not runningAVERAGE
- Service Dgd statusSNMP_AGENTSFOS-FIREWALL-MIB::sfosDgdService.0dgdService5m2w0ServicesSOPHOS SFOS-FIREWALL-MIB::serviceStatus{last()}<>3Service dgd status is not runningAVERAGE
- Disk capacitySNMP_AGENTSFOS-FIREWALL-MIB::sfosDiskCapacity.0diskCapacity1h2w150dBMemoryMULTIPLIER1048576
- Disk utilizationSNMP_AGENTSFOS-FIREWALL-MIB::sfosDiskPercentUsage.0diskPercentUsage5m45d150d%Memory{avg(5m)}>{$DISK_UTIL_MAX}RECOVERY_EXPRESSION{avg(5m)}<({$DISK_UTIL_MAX}-5)Disk utilization highHIGH
- Service dns statusSNMP_AGENTSFOS-FIREWALL-MIB::sfosDNSService.0dnsService5m2w0ServicesSOPHOS SFOS-FIREWALL-MIB::serviceStatus{last()}<>3Service dns status is not runningAVERAGE
- Service drouting statusSNMP_AGENTSFOS-FIREWALL-MIB::sfosDroutingService.0droutingService5m2w0ServicesSOPHOS SFOS-FIREWALL-MIB::serviceStatus{last()}<>3Service drouting status is not runningAVERAGE
- Firmware versionSNMP_AGENTSFOS-FIREWALL-MIB::sfosDeviceFWVersion.0firewallVersion1h2w0CHARVersion of Intrusion Detection and Prevention (IDP)Inventory{diff()}=1NONEFirmware version changedINFOAck to manual closeYES
- Service FTP statusSNMP_AGENTSFOS-FIREWALL-MIB::sfosFtpService.0ftpService5m2w0ServicesSOPHOS SFOS-FIREWALL-MIB::serviceStatus{last()}<>3Service ftp status is not runningAVERAGE
- Service garner statusSNMP_AGENTSFOS-FIREWALL-MIB::sfosGarnerService.0garnerService5m2w0ServicesSOPHOS SFOS-FIREWALL-MIB::serviceStatus{last()}<>3Service garner status is not runningAVERAGE
- HA modeSNMP_AGENTSFOS-FIREWALL-MIB::sfosHAStatus.0haMode5m45d150dTextual Convention: HaStatusType
Values: disabled(0), enabled(1)StatusSOPHOS SFOS-FIREWALL-MIB::haStatusType
- Service HA statusSNMP_AGENTSFOS-FIREWALL-MIB::sfosHAService.0haService5m2w0ServicesSOPHOS SFOS-FIREWALL-MIB::serviceStatus{last()}<>3 and {last()}<>0Service ha status is not runningAVERAGE
- HTTP HitsSNMP_AGENTSFOS-FIREWALL-MIB::sfosHTTPHits.0httpHits3m2w0Statistic
- Service HTTP statusSNMP_AGENTSFOS-FIREWALL-MIB::sfosHttpService.0httpService5m2w0ServicesSOPHOS SFOS-FIREWALL-MIB::serviceStatus{last()}<>3Service http status is not runningAVERAGE
- Service IMAP4 statusSNMP_AGENTSFOS-FIREWALL-MIB::sfosImap4Service.0imap4Service5m2w0ServicesSOPHOS SFOS-FIREWALL-MIB::serviceStatus{last()}<>3Service imap4 status is not runningAVERAGE
- IMAP HitsSNMP_AGENTSFOS-FIREWALL-MIB::sfosImapHits.0imapHits3m2w0Statistic
- Service IP-Sec VPN statusSNMP_AGENTSFOS-FIREWALL-MIB::sfosIPSecVpnService.0ipSecVpnService5m2w0ServicesSOPHOS SFOS-FIREWALL-MIB::serviceStatus{last()}<>3Service IP-Sec VPN status is not runningAVERAGE
- Service IPS statusSNMP_AGENTSFOS-FIREWALL-MIB::sfosIPSService.0ipsService5m2w0ServicesSOPHOS SFOS-FIREWALL-MIB::serviceStatus{last()}<>3Service IPS status is not runningAVERAGE
- IDS versionSNMP_AGENTSFOS-FIREWALL-MIB::sfosIPSVersion.0ipsVersion1h2w0CHARVersion of Intrusion Detection and Prevention (IDP)Inventory
- Live user countSNMP_AGENTSFOS-FIREWALL-MIB::sfosLiveUsersCount.0liveUserCount3m2w0Statistic
- Mail Protection license expire dateSNMP_AGENTSFOS-FIREWALL-MIB::sfosMailProtectionLicExpiryDate.0mailProtectionLicExpiryDate1h2w0TEXTEMail Protection Iicense Expiry Date.License
- Mail Protection license reg statusSNMP_AGENTSFOS-FIREWALL-MIB::sfosMailProtectionLicRegStatus.0mailProtectionLicRegStatus1h2wEMail Protection license status.LicenseSOPHOS SFOS-FIREWALL-MIB::subscriptionStatusType{last()}=4Mail Protection license reg statushttps://{$ZABBIX_DNS}/zabbix.php?action=latest.view&filter_hostids%5B%5D={HOST.ID}&filter_application=License&select=&filter_set=1AVERAGEMail Protection license is expired.
- Memory capacitySNMP_AGENTSFOS-FIREWALL-MIB::sfosMemoryCapacity.0memoryCapacity1h2w150dBMemoryMULTIPLIER1048576
- Memory utilizationSNMP_AGENTSFOS-FIREWALL-MIB::sfosMemoryPercentUsage.0memoryPercentUsage45d150d%Memory{avg(15m)}>{$MEMORY_UTIL_MAX}RECOVERY_EXPRESSION{avg(5m)}<({$MEMORY_UTIL_MAX}-5)Memory utilization highHIGH
- Network Protection license expire dateSNMP_AGENTSFOS-FIREWALL-MIB::sfosNetProtectionLicExpiryDate.0netProtectionLicExpiryDate1h2w0TEXTNetwork Protection Iicense Expiry Date.License
- Network Protection reg license statusSNMP_AGENTSFOS-FIREWALL-MIB::sfosNetProtectionLicRegStatus.0netProtectionLicRegStatus1h2wNetwork Protection registration license statusLicenseSOPHOS SFOS-FIREWALL-MIB::subscriptionStatusType{last()}=4Network Protection reg license statushttps://{$ZABBIX_DNS}/zabbix.php?action=latest.view&filter_hostids%5B%5D={HOST.ID}&filter_application=License&select=&filter_set=1AVERAGENetwork Protection reg status is expired.
- Service network statusSNMP_AGENTSFOS-FIREWALL-MIB::sfosNetworkService.0networkService5m2w0ServicesSOPHOS SFOS-FIREWALL-MIB::serviceStatus{last()}<>3Service network status is not runningAVERAGE
- Service NTP statusSNMP_AGENTSFOS-FIREWALL-MIB::sfosNtpService.0ntpService5m2w0ServicesSOPHOS SFOS-FIREWALL-MIB::serviceStatus{last()}<>3 and {last()}<>7Service ntp status is not runningAVERAGE
- POP3 HitsSNMP_AGENTSFOS-FIREWALL-MIB::sfosPOP3Hits.0pop3Hits3m2w0Statistic
- Service POP3 statusSNMP_AGENTSFOS-FIREWALL-MIB:sfosPoP3Service.0pop3Service5m2w0ServicesSOPHOS SFOS-FIREWALL-MIB::serviceStatus{last()}<>3Service pop3 status is not runningAVERAGE
- Sandstrom license expire dateSNMP_AGENTSFOS-FIREWALL-MIB::sfosSandstromLicExpiryDate.0sandstromLicExpiryDate1h2w0TEXTSandstrom Protection Iicense Expiry Date.License
- Sandstrom license reg statusSNMP_AGENTSFOS-FIREWALL-MIB::sfosSandstromLicRegStatus.0sandstromLicRegStatus1h2wSandstrom Protection Iicense status.LicenseSOPHOS SFOS-FIREWALL-MIB::subscriptionStatusType{last()}=4Sandstrom license reg statushttps://{$ZABBIX_DNS}/zabbix.php?action=latest.view&filter_hostids%5B%5D={HOST.ID}&filter_application=License&select=&filter_set=1AVERAGESandstrom Protection licensereg status is expired.
- SMTP HitsSNMP_AGENTSFOS-FIREWALL-MIB::sfosSmtpHits.0smtpHits3m2w0Statistic
- Service SMTP statusSNMP_AGENTSFOS-FIREWALL-MIB::sfosSmtpService.0smtpService5m2w0ServicesSOPHOS SFOS-FIREWALL-MIB::serviceStatus{last()}<>3Service smtp status is not runningAVERAGE
- Service sshd statusSNMP_AGENTSFOS-FIREWALL-MIB::sfosSSHdService.0sshdService5m2w0ServicesSOPHOS SFOS-FIREWALL-MIB::serviceStatus{last()}<>3 and {last()}<>0Service sshd status is not runningAVERAGE
- Service SSL-VPN statusSNMP_AGENTSFOS-FIREWALL-MIB:sfosSSLVpnService.0sslvpnService5m2w0ServicesSOPHOS SFOS-FIREWALL-MIB::serviceStatus{last()}<>3 and {last()}<>7Service sslvpn status is not runningAVERAGE
- Swap capacitySNMP_AGENTSFOS-FIREWALL-MIB::sfosSwapCapacity.0swapCapacity1h2w150dBMemoryMULTIPLIER1048576
- Swap utilizationSNMP_AGENTSFOS-FIREWALL-MIB::sfosSwapPercentUsage.0swapPercentUsage5m45d150d%Memory{avg(5m)}>{$SWAP_UTIL_MAX}RECOVERY_EXPRESSION{avg(5m)}<({$SWAP_UTIL_MAX}-5)Swap utilization highHIGH
- Service tomcat statusSNMP_AGENTSFOS-FIREWALL-MIB::sfosTomcatService.0tomcatService5m2w0ServicesSOPHOS SFOS-FIREWALL-MIB::serviceStatus{last()}<>3Service tomcat status is not runningAVERAGE
- Webcat versionSNMP_AGENTSFOS-FIREWALL-MIB::sfosWebcatVersion.0webcatVersion1h2w0CHARVersion of WebcatInventory
- Web Protection license expire dateSNMP_AGENTSFOS-FIREWALL-MIB::sfosWebProtectionLicExpiryDate.0webProtectionLicExpiryDate1h2w0TEXTWeb Protection license expiry date.License
- Web Protection license reg statusSNMP_AGENTSFOS-FIREWALL-MIB::sfosWebProtectionLicRegStatus.0webProtectionLicRegStatus1h2wWeb Protection registration license status.LicenseSOPHOS SFOS-FIREWALL-MIB::subscriptionStatusType{last()}=4Web Protection license reg statushttps://{$ZABBIX_DNS}/zabbix.php?action=latest.view&filter_hostids%5B%5D={HOST.ID}&filter_application=License&select=&filter_set=1AVERAGEWeb Protection license reg staus is expired.
- WebServer Protection license expire dateSNMP_AGENTSFOS-FIREWALL-MIB::sfosWebServerProtectionLicExpiryDate.0webServerProtectionLicExpiryDate1h2w0TEXTWebServer Protection Iicense Expiry Date.License
- WebServer Protection license reg statusSNMP_AGENTSFOS-FIREWALL-MIB::sfosWebServerProtectionLicRegStatus.0webServerProtectionLicRegStatus1h2wWebServer Protection license status.LicenseSOPHOS SFOS-FIREWALL-MIB::subscriptionStatusType{last()}=4WebServer Protection license reg statushttps://{$ZABBIX_DNS}/zabbix.php?action=latest.view&filter_hostids%5B%5D={HOST.ID}&filter_application=License&select=&filter_set=1AVERAGEWebServer Protection license reg status is expired.
{$CPU_UTIL_MAX}95{$DISK_UTIL_MAX}90{$MEMORY_UTIL_MAX}90{$SNMP_COMMUNITY}public{$SWAP_UTIL_MAX}90Network interfaces1120Interface {#IFNAME}({#IFALIAS}): Network trafficSophos XG FW 18 SNMPv250010000112500003Template Module Generic SNMPTemplate Module Generic SNMPTemplate Module Generic
MIBs used:
SNMPv2-MIB
Template tooling version used: 0.36Template Module ICMP PingTemplates/ModulesGeneral- SNMP traps (fallback)SNMP_TRAPsnmptrap.fallback2w0LOGItem is used to collect all SNMP traps unmatched by other snmptrap itemsGeneralhh:mm:sszyyyy/MM/dd
- System contact detailsSNMP_AGENT1.3.6.1.2.1.1.4.0system.contact[sysContact.0]1h2w0CHARMIB: SNMPv2-MIB
The textual identification of the contact person for this managed node, together with information on how to contact this person. If no contact information is known, the value is the zero-length string.CONTACTGeneralDISCARD_UNCHANGED_HEARTBEAT1d
- System descriptionSNMP_AGENT1.3.6.1.2.1.1.1.0system.descr[sysDescr.0]1h2w0CHARMIB: SNMPv2-MIB
A textual description of the entity. This value should
include the full name and version identification of the system's hardware type, software operating-system, and
networking software.GeneralDISCARD_UNCHANGED_HEARTBEAT1d
- System locationSNMP_AGENT1.3.6.1.2.1.1.6.0system.location[sysLocation.0]1h2w0CHARMIB: SNMPv2-MIB
The physical location of this node (e.g., `telephone closet, 3rd floor'). If the location is unknown, the value is the zero-length string.LOCATIONGeneralDISCARD_UNCHANGED_HEARTBEAT1h
- System nameSNMP_AGENT1.3.6.1.2.1.1.5.0system.name1h2w0CHARMIB: SNMPv2-MIB
An administratively-assigned name for this managed node.By convention, this is the node's fully-qualified domain name. If the name is unknown, the value is the zero-length string.NAMEGeneralDISCARD_UNCHANGED_HEARTBEAT1h{diff()}=1 and {strlen()}>0System name has changed (new name: {ITEM.VALUE})INFOSystem name has changed. Ack to close.YES
- System object IDSNMP_AGENT1.3.6.1.2.1.1.2.0system.objectid[sysObjectID.0]15m2w0CHARMIB: SNMPv2-MIB
The vendor's authoritative identification of the network management subsystem contained in the entity. This value is allocated within the SMI enterprises subtree (1.3.6.1.4.1) and provides an easy and unambiguous means for determining`what kind of box' is being managed. For example, if vendor`Flintstones, Inc.' was assigned the subtree1.3.6.1.4.1.4242, it could assign the identifier 1.3.6.1.4.1.4242.1.1 to its `Fred Router'.GeneralDISCARD_UNCHANGED_HEARTBEAT1h
- UptimeSNMP_AGENT1.3.6.1.2.1.1.3.0system.uptime[sysUpTime.0]30s2w0duptimeMIB: SNMPv2-MIB
The time (in hundredths of a second) since the network management portion of the system was last re-initialized.StatusMULTIPLIER0.01{last()}<10m{HOST.NAME} has been restarted (uptime < 10m)WARNINGUptime is less than 10 minutesYESNo SNMP data collection{Template Module Generic SNMP:zabbix[host,snmp,available].max({$SNMP.TIMEOUT})}=0
- SNMP agent availabilityINTERNALzabbix[host,snmp,available]7dStatuszabbix.host.available{max({$SNMP.TIMEOUT})}=0No SNMP data collectionCurrent state: {ITEM.LASTVALUE1}WARNINGSNMP is not available for polling. Please check device connectivity and SNMP settings.Unavailable by ICMP ping{Template Module Generic SNMP:icmpping.max(#3)}=0
{$SNMP.TIMEOUT}5mTemplate Module HOST-RESOURCES-MIB CPU SNMPTemplate Module HOST-RESOURCES-MIB CPU SNMPRequires Zabbix server 4.0.14, 4.2.8, 4.4.0 or newer (JSONPath function avg() used with types autoconversion).
MIBs used:
HOST-RESOURCES-MIB
Template tooling version used: 0.36Templates/ModulesCPU- CPU utilizationSNMP_AGENTdiscovery[{#CPU.UTIL},1.3.6.1.2.1.25.3.3.1.2]system.cpu.util7dFLOAT%MIB: HOST-RESOURCES-MIB
The average, over the last minute, of the percentage of time that processors was not idle.
Implementations may approximate this one minute smoothing period if necessary.CPUJSONPATH$..['{#CPU.UTIL}'].avg(){min(5m)}>{$CPU.UTIL.CRIT}High CPU utilization (over {$CPU.UTIL.CRIT}% for 5m)Current utilization: {ITEM.LASTVALUE1}WARNINGCPU utilization is too high. The system might be slow to respond.
{$CPU.UTIL.CRIT}90Template Module ICMP PingTemplate Module ICMP PingTemplate Module ICMP Ping version: 0.12Templates/ModulesStatus- ICMP pingSIMPLEicmpping601wStatusService state{max(#3)}=0Unavailable by ICMP pingHIGHLast value: {ITEM.LASTVALUE1}.
Last three attempts returned timeout. Please check device connectivity.
- ICMP lossSIMPLEicmppingloss601wFLOAT%Status{min(5m)}>{$ICMP_LOSS_WARN} and {min(5m)}<100High ICMP ping lossWARNINGUnavailable by ICMP ping{Template Module ICMP Ping:icmpping.max(#3)}=0
- ICMP response timeSIMPLEicmppingsec601wFLOATsStatus{avg(5m)}>{$ICMP_RESPONSE_TIME_WARN}High ICMP ping response timeWARNINGHigh ICMP ping loss{Template Module ICMP Ping:icmppingloss.min(5m)}>{$ICMP_LOSS_WARN} and {Template Module ICMP Ping:icmppingloss.min(5m)}<100Unavailable by ICMP ping{Template Module ICMP Ping:icmpping.max(#3)}=0
{$ICMP_LOSS_WARN}20{$ICMP_RESPONSE_TIME_WARN}0.15Template Module Interfaces SNMPTemplate Module Interfaces SNMPTemplate Module Interfaces
MIBs used:
IF-MIB
Template tooling version used: 0.36Templates/ModulesNetwork interfacesNetwork interfaces discoverySNMP_AGENTdiscovery[{#IFOPERSTATUS},1.3.6.1.2.1.2.2.1.8,{#IFADMINSTATUS},1.3.6.1.2.1.2.2.1.7,{#IFALIAS},1.3.6.1.2.1.31.1.1.1.18,{#IFNAME},1.3.6.1.2.1.31.1.1.1.1,{#IFDESCR},1.3.6.1.2.1.2.2.1.2,{#IFTYPE},1.3.6.1.2.1.2.2.1.3]net.if.discovery1hAND{#IFADMINSTATUS}{$NET.IF.IFADMINSTATUS.MATCHES}A{#IFADMINSTATUS}{$NET.IF.IFADMINSTATUS.NOT_MATCHES}NOT_MATCHES_REGEXB{#IFOPERSTATUS}{$NET.IF.IFOPERSTATUS.MATCHES}I{#IFOPERSTATUS}{$NET.IF.IFOPERSTATUS.NOT_MATCHES}NOT_MATCHES_REGEXJ{#IFNAME}{$NET.IF.IFNAME.MATCHES}G{#IFNAME}{$NET.IF.IFNAME.NOT_MATCHES}NOT_MATCHES_REGEXH{#IFDESCR}{$NET.IF.IFDESCR.MATCHES}E{#IFDESCR}{$NET.IF.IFDESCR.NOT_MATCHES}NOT_MATCHES_REGEXF{#IFALIAS}{$NET.IF.IFALIAS.MATCHES}C{#IFALIAS}{$NET.IF.IFALIAS.NOT_MATCHES}NOT_MATCHES_REGEXD{#IFTYPE}{$NET.IF.IFTYPE.MATCHES}K{#IFTYPE}{$NET.IF.IFTYPE.NOT_MATCHES}NOT_MATCHES_REGEXLDiscovering interfaces from IF-MIB.Interface {#IFNAME}({#IFALIAS}): Inbound packets discardedSNMP_AGENT1.3.6.1.2.1.2.2.1.13.{#SNMPINDEX}net.if.in.discards[ifInDiscards.{#SNMPINDEX}]3m7dMIB: IF-MIB
The number of inbound packets which were chosen to be discarded
even though no errors had been detected to prevent their being deliverable to a higher-layer protocol.
One possible reason for discarding such a packet could be to free up buffer space.
Discontinuities in the value of this counter can occur at re-initialization of the management system,
and at other times as indicated by the value of ifCounterDiscontinuityTime.Interface {#IFNAME}({#IFALIAS})CHANGE_PER_SECONDInterface {#IFNAME}({#IFALIAS}): Inbound packets with errorsSNMP_AGENT1.3.6.1.2.1.2.2.1.14.{#SNMPINDEX}net.if.in.errors[ifInErrors.{#SNMPINDEX}]3m7dMIB: IF-MIB
For packet-oriented interfaces, the number of inbound packets that contained errors preventing them from being deliverable to a higher-layer protocol. For character-oriented or fixed-length interfaces, the number of inbound transmission units that contained errors preventing them from being deliverable to a higher-layer protocol. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.Interface {#IFNAME}({#IFALIAS})CHANGE_PER_SECONDInterface {#IFNAME}({#IFALIAS}): Bits receivedSNMP_AGENT1.3.6.1.2.1.31.1.1.1.6.{#SNMPINDEX}net.if.in[ifHCInOctets.{#SNMPINDEX}]3m7dbpsMIB: IF-MIB
The total number of octets received on the interface, including framing characters. This object is a 64-bit version of ifInOctets. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.Interface {#IFNAME}({#IFALIAS})CHANGE_PER_SECONDMULTIPLIER8Interface {#IFNAME}({#IFALIAS}): Outbound packets discardedSNMP_AGENT1.3.6.1.2.1.2.2.1.19.{#SNMPINDEX}net.if.out.discards[ifOutDiscards.{#SNMPINDEX}]3m7dMIB: IF-MIB
The number of outbound packets which were chosen to be discarded
even though no errors had been detected to prevent their being deliverable to a higher-layer protocol.
One possible reason for discarding such a packet could be to free up buffer space.
Discontinuities in the value of this counter can occur at re-initialization of the management system,
and at other times as indicated by the value of ifCounterDiscontinuityTime.Interface {#IFNAME}({#IFALIAS})CHANGE_PER_SECONDInterface {#IFNAME}({#IFALIAS}): Outbound packets with errorsSNMP_AGENT1.3.6.1.2.1.2.2.1.20.{#SNMPINDEX}net.if.out.errors[ifOutErrors.{#SNMPINDEX}]3m7dMIB: IF-MIB
For packet-oriented interfaces, the number of outbound packets that contained errors preventing them from being deliverable to a higher-layer protocol. For character-oriented or fixed-length interfaces, the number of outbound transmission units that contained errors preventing them from being deliverable to a higher-layer protocol. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.Interface {#IFNAME}({#IFALIAS})CHANGE_PER_SECONDInterface {#IFNAME}({#IFALIAS}): Bits sentSNMP_AGENT1.3.6.1.2.1.31.1.1.1.10.{#SNMPINDEX}net.if.out[ifHCOutOctets.{#SNMPINDEX}]3m7dbpsMIB: IF-MIB
The total number of octets transmitted out of the interface, including framing characters. This object is a 64-bit version of ifOutOctets.Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.Interface {#IFNAME}({#IFALIAS})CHANGE_PER_SECONDMULTIPLIER8Interface {#IFNAME}({#IFALIAS}): SpeedSNMP_AGENT1.3.6.1.2.1.31.1.1.1.15.{#SNMPINDEX}net.if.speed[ifHighSpeed.{#SNMPINDEX}]5m7d0dbpsMIB: IF-MIB
An estimate of the interface's current bandwidth in units of 1,000,000 bits per second. If this object reports a value of `n' then the speed of the interface is somewhere in the range of `n-500,000' to`n+499,999'. For interfaces which do not vary in bandwidth or for those where no accurate estimation can be made, this object should contain the nominal bandwidth. For a sub-layer which has no concept of bandwidth, this object should be zero.Interface {#IFNAME}({#IFALIAS})MULTIPLIER1000000DISCARD_UNCHANGED_HEARTBEAT1hInterface {#IFNAME}({#IFALIAS}): Operational statusSNMP_AGENT1.3.6.1.2.1.2.2.1.8.{#SNMPINDEX}net.if.status[ifOperStatus.{#SNMPINDEX}]7d0MIB: IF-MIB
The current operational state of the interface.
- The testing(3) state indicates that no operational packet scan be passed
- If ifAdminStatus is down(2) then ifOperStatus should be down(2)
- If ifAdminStatus is changed to up(1) then ifOperStatus should change to up(1) if the interface is ready to transmit and receive network traffic
- It should change todormant(5) if the interface is waiting for external actions (such as a serial line waiting for an incoming connection)
- It should remain in the down(2) state if and only if there is a fault that prevents it from going to the up(1) state
- It should remain in the notPresent(6) state if the interface has missing(typically, hardware) components.Interface {#IFNAME}({#IFALIAS})IF-MIB::ifOperStatus{$IFCONTROL:"{#IFNAME}"}=1 and ({last()}=2 and {diff()}=1)RECOVERY_EXPRESSION{last()}<>2 or {$IFCONTROL:"{#IFNAME}"}=0Interface {#IFNAME}({#IFALIAS}): Link downCurrent state: {ITEM.LASTVALUE1}AVERAGEThis trigger expression works as follows:
1. Can be triggered if operations status is down.
2. {$IFCONTROL:"{#IFNAME}"}=1 - user can redefine Context macro to value - 0. That marks this interface as not important. No new trigger will be fired if this interface is down.
3. {TEMPLATE_NAME:METRIC.diff()}=1) - trigger fires only if operational status was up(1) sometime before. (So, do not fire 'ethernal off' interfaces.)
WARNING: if closed manually - won't fire again on next poll, because of .diff.YESInterface {#IFNAME}({#IFALIAS}): Interface typeSNMP_AGENT1.3.6.1.2.1.2.2.1.3.{#SNMPINDEX}net.if.type[ifType.{#SNMPINDEX}]1h7d0dMIB: IF-MIB
The type of interface.
Additional values for ifType are assigned by the Internet Assigned NumbersAuthority (IANA),
through updating the syntax of the IANAifType textual convention.Interface {#IFNAME}({#IFALIAS})IF-MIB::ifTypeDISCARD_UNCHANGED_HEARTBEAT1d{Template Module Interfaces SNMP:net.if.speed[ifHighSpeed.{#SNMPINDEX}].change()}<0 and {Template Module Interfaces SNMP:net.if.speed[ifHighSpeed.{#SNMPINDEX}].last()}>0
and (
{Template Module Interfaces SNMP:net.if.type[ifType.{#SNMPINDEX}].last()}=6 or
{Template Module Interfaces SNMP:net.if.type[ifType.{#SNMPINDEX}].last()}=7 or
{Template Module Interfaces SNMP:net.if.type[ifType.{#SNMPINDEX}].last()}=11 or
{Template Module Interfaces SNMP:net.if.type[ifType.{#SNMPINDEX}].last()}=62 or
{Template Module Interfaces SNMP:net.if.type[ifType.{#SNMPINDEX}].last()}=69 or
{Template Module Interfaces SNMP:net.if.type[ifType.{#SNMPINDEX}].last()}=117
)
and
({Template Module Interfaces SNMP:net.if.status[ifOperStatus.{#SNMPINDEX}].last()}<>2)RECOVERY_EXPRESSION({Template Module Interfaces SNMP:net.if.speed[ifHighSpeed.{#SNMPINDEX}].change()}>0 and {Template Module Interfaces SNMP:net.if.speed[ifHighSpeed.{#SNMPINDEX}].prev()}>0) or
({Template Module Interfaces SNMP:net.if.status[ifOperStatus.{#SNMPINDEX}].last()}=2)Interface {#IFNAME}({#IFALIAS}): Ethernet has changed to lower speed than it was beforeCurrent reported speed: {ITEM.LASTVALUE1}INFOThis Ethernet connection has transitioned down from its known maximum speed. This might be a sign of autonegotiation issues. Ack to close.YESInterface {#IFNAME}({#IFALIAS}): Link down{$IFCONTROL:"{#IFNAME}"}=1 and ({Template Module Interfaces SNMP:net.if.status[ifOperStatus.{#SNMPINDEX}].last()}=2 and {Template Module Interfaces SNMP:net.if.status[ifOperStatus.{#SNMPINDEX}].diff()}=1){Template Module Interfaces SNMP:net.if.status[ifOperStatus.{#SNMPINDEX}].last()}<>2 or {$IFCONTROL:"{#IFNAME}"}=0({Template Module Interfaces SNMP:net.if.in[ifHCInOctets.{#SNMPINDEX}].avg(15m)}>({$IF.UTIL.MAX:"{#IFNAME}"}/100)*{Template Module Interfaces SNMP:net.if.speed[ifHighSpeed.{#SNMPINDEX}].last()} or
{Template Module Interfaces SNMP:net.if.out[ifHCOutOctets.{#SNMPINDEX}].avg(15m)}>({$IF.UTIL.MAX:"{#IFNAME}"}/100)*{Template Module Interfaces SNMP:net.if.speed[ifHighSpeed.{#SNMPINDEX}].last()}) and
{Template Module Interfaces SNMP:net.if.speed[ifHighSpeed.{#SNMPINDEX}].last()}>0RECOVERY_EXPRESSION{Template Module Interfaces SNMP:net.if.in[ifHCInOctets.{#SNMPINDEX}].avg(15m)}<(({$IF.UTIL.MAX:"{#IFNAME}"}-3)/100)*{Template Module Interfaces SNMP:net.if.speed[ifHighSpeed.{#SNMPINDEX}].last()} and
{Template Module Interfaces SNMP:net.if.out[ifHCOutOctets.{#SNMPINDEX}].avg(15m)}<(({$IF.UTIL.MAX:"{#IFNAME}"}-3)/100)*{Template Module Interfaces SNMP:net.if.speed[ifHighSpeed.{#SNMPINDEX}].last()}Interface {#IFNAME}({#IFALIAS}): High bandwidth usage (> {$IF.UTIL.MAX:"{#IFNAME}"}% )In: {ITEM.LASTVALUE1}, out: {ITEM.LASTVALUE3}, speed: {ITEM.LASTVALUE2}WARNINGThe network interface utilization is close to its estimated maximum bandwidth.YESInterface {#IFNAME}({#IFALIAS}): Link down{$IFCONTROL:"{#IFNAME}"}=1 and ({Template Module Interfaces SNMP:net.if.status[ifOperStatus.{#SNMPINDEX}].last()}=2 and {Template Module Interfaces SNMP:net.if.status[ifOperStatus.{#SNMPINDEX}].diff()}=1){Template Module Interfaces SNMP:net.if.status[ifOperStatus.{#SNMPINDEX}].last()}<>2 or {$IFCONTROL:"{#IFNAME}"}=0{Template Module Interfaces SNMP:net.if.in.errors[ifInErrors.{#SNMPINDEX}].min(5m)}>{$IF.ERRORS.WARN:"{#IFNAME}"}
or {Template Module Interfaces SNMP:net.if.out.errors[ifOutErrors.{#SNMPINDEX}].min(5m)}>{$IF.ERRORS.WARN:"{#IFNAME}"}RECOVERY_EXPRESSION{Template Module Interfaces SNMP:net.if.in.errors[ifInErrors.{#SNMPINDEX}].max(5m)}<{$IF.ERRORS.WARN:"{#IFNAME}"}*0.8
and {Template Module Interfaces SNMP:net.if.out.errors[ifOutErrors.{#SNMPINDEX}].max(5m)}<{$IF.ERRORS.WARN:"{#IFNAME}"}*0.8Interface {#IFNAME}({#IFALIAS}): High error rate (> {$IF.ERRORS.WARN:"{#IFNAME}"} for 5m)errors in: {ITEM.LASTVALUE1}, errors out: {ITEM.LASTVALUE2}WARNINGRecovers when below 80% of {$IF.ERRORS.WARN:"{#IFNAME}"} thresholdYESInterface {#IFNAME}({#IFALIAS}): Link down{$IFCONTROL:"{#IFNAME}"}=1 and ({Template Module Interfaces SNMP:net.if.status[ifOperStatus.{#SNMPINDEX}].last()}=2 and {Template Module Interfaces SNMP:net.if.status[ifOperStatus.{#SNMPINDEX}].diff()}=1){Template Module Interfaces SNMP:net.if.status[ifOperStatus.{#SNMPINDEX}].last()}<>2 or {$IFCONTROL:"{#IFNAME}"}=0Interface {#IFNAME}({#IFALIAS}): Network trafficGRADIENT_LINE1A7C11- Template Module Interfaces SNMPnet.if.in[ifHCInOctets.{#SNMPINDEX}]
1BOLD_LINE2774A4- Template Module Interfaces SNMPnet.if.out[ifHCOutOctets.{#SNMPINDEX}]
2F63100RIGHT- Template Module Interfaces SNMPnet.if.out.errors[ifOutErrors.{#SNMPINDEX}]
3A54F10RIGHT- Template Module Interfaces SNMPnet.if.in.errors[ifInErrors.{#SNMPINDEX}]
4FC6EA3RIGHT- Template Module Interfaces SNMPnet.if.out.discards[ifOutDiscards.{#SNMPINDEX}]
56C59DCRIGHT- Template Module Interfaces SNMPnet.if.in.discards[ifInDiscards.{#SNMPINDEX}]
{$IF.ERRORS.WARN}2{$IF.UTIL.MAX}90{$IFCONTROL}1{$NET.IF.IFADMINSTATUS.MATCHES}^.*Ignore notPresent(6){$NET.IF.IFADMINSTATUS.NOT_MATCHES}^2$Ignore down(2) administrative status{$NET.IF.IFALIAS.MATCHES}.*{$NET.IF.IFALIAS.NOT_MATCHES}CHANGE_IF_NEEDED{$NET.IF.IFDESCR.MATCHES}.*{$NET.IF.IFDESCR.NOT_MATCHES}CHANGE_IF_NEEDED{$NET.IF.IFNAME.MATCHES}^.*${$NET.IF.IFNAME.NOT_MATCHES}(^Software Loopback Interface|^NULL[0-9.]*$|^[Ll]o[0-9.]*$|^[Ss]ystem$|^Nu[0-9.]*$|^veth[0-9a-z]+$|docker[0-9]+|br-[a-z0-9]{12})Filter out loopbacks, nulls, docker veth links and docker0 bridge by default{$NET.IF.IFOPERSTATUS.MATCHES}^.*${$NET.IF.IFOPERSTATUS.NOT_MATCHES}^6$Ignore notPresent(6){$NET.IF.IFTYPE.MATCHES}.*{$NET.IF.IFTYPE.NOT_MATCHES}CHANGE_IF_NEEDEDNetwork interfaces1120Interface {#IFNAME}({#IFALIAS}): Network trafficTemplate Module Interfaces SNMP50010000112500003CPU utilizationFIXEDFIXEDGRADIENT_LINE1A7C11- Template Module HOST-RESOURCES-MIB CPU SNMPsystem.cpu.util
IF-MIB::ifOperStatus1up2down3testing4unknown5dormant6notPresent7lowerLayerDownIF-MIB::ifType1other2regular18223hdh18224ddnX255rfc877x256ethernetCsmacd7iso88023Csmacd8iso88024TokenBus9iso88025TokenRing10iso88026Man11starLan12proteon10Mbit13proteon80Mbit14hyperchannel15fddi16lapb17sdlc18ds119e120basicISDN21primaryISDN22propPointToPointSerial23ppp24softwareLoopback25eon26ethernet3Mbit27nsip28slip29ultra30ds331sip32frameRelay33rs23234para35arcnet36arcnetPlus37atm38miox2539sonet40x25ple41iso88022llc42localTalk43smdsDxi44frameRelayService45v3546hssi47hippi48modem49aal550sonetPath51sonetVT52smdsIcip53propVirtual54propMultiplexor55ieee8021256fibreChannel57hippiInterface58frameRelayInterconnect59aflane802360aflane802561cctEmul62fastEther63isdn64v1165v3666g703at64k67g703at2mb68qllc69fastEtherFX70channel71ieee8021172ibm370parChan73escon74dlsw75isdns76isdnu77lapd78ipSwitch79rsrb80atmLogical81ds082ds0Bundle83bsc84async85cnr86iso88025Dtr87eplrs88arap89propCnls90hostPad91termPad92frameRelayMPI93x21394adsl95radsl96sdsl97vdsl98iso88025CRFPInt99myrinet100voiceEM101voiceFXO102voiceFXS103voiceEncap104voiceOverIp105atmDxi106atmFuni107atmIma108pppMultilinkBundle109ipOverCdlc110ipOverClaw111stackToStack112virtualIpAddress113mpc114ipOverAtm115iso88025Fiber116tdlc117gigabitEthernet118hdlc119lapf120v37121x25mlp122x25huntGroup123trasnpHdlc124interleave125fast126ip127docsCableMaclayer128docsCableDownstream129docsCableUpstream130a12MppSwitch131tunnel132coffee133ces134atmSubInterface135l2vlan136l3ipvlan137l3ipxvlan138digitalPowerline139mediaMailOverIp140dtm141dcn142ipForward143msdsl144ieee1394145if-gsn146dvbRccMacLayer147dvbRccDownstream148dvbRccUpstream149atmVirtual150mplsTunnel151srp152voiceOverAtm153voiceOverFrameRelay154idsl155compositeLink156ss7SigLink157propWirelessP2P158frForward159rfc1483160usb161ieee8023adLag162bgppolicyaccounting163frf16MfrBundle164h323Gatekeeper165h323Proxy166mpls167mfSigLink168hdsl2169shdsl170ds1FDL171pos172dvbAsiIn173dvbAsiOut174plc175nfas176tr008177gr303RDT178gr303IDT179isup180propDocsWirelessMaclayer181propDocsWirelessDownstream182propDocsWirelessUpstream183hiperlan2184propBWAp2Mp185sonetOverheadChannel186digitalWrapperOverheadChannel187aal2188radioMAC189atmRadio190imt191mvl192reachDSL193frDlciEndPt194atmVciEndPt195opticalChannel196opticalTransport197propAtm198voiceOverCable199infiniband200teLink201q2931202virtualTg203sipTg204sipSig205docsCableUpstreamChannel206econet207pon155208pon622209bridge210linegroup211voiceEMFGD212voiceFGDEANA213voiceDID214mpegTransport215sixToFour216gtp217pdnEtherLoop1218pdnEtherLoop2219opticalChannelGroup220homepna221gfp222ciscoISLvlan223actelisMetaLOOP224fcipLink225rpr226qam227lmp228cblVectaStar229docsCableMCmtsDownstream230adsl2231macSecControlledIF232macSecUncontrolledIF233aviciOpticalEther234atmbond235voiceFGDOS236mocaVersion1237ieee80216WMAN238adsl2plus239dvbRcsMacLayer240dvbTdm241dvbRcsTdma242x86Laps243wwanPP244wwanPP2245voiceEBS246ifPwType247ilan248pip249aluELP250gpon251vdsl2252capwapDot11Profile253capwapDot11Bss254capwapWtpVirtualRadio255bits256docsCableUpstreamRfPort257cableDownstreamRfPort258vmwareVirtualNic259ieee802154260otnOdu261otnOtu262ifVfiType263g9981264g9982265g9983266aluEpon267aluEponOnu268aluEponPhysicalUni269aluEponLogicalLink270aluGponOnu271aluGponPhysicalUni272vmwareNicTeam277docsOfdmDownstream278docsOfdmaUpstream279gfast280sdci281xboxWireless282fastdsl283docsCableScte55d1FwdOob284docsCableScte55d1RetOob285docsCableScte55d2DsOob286docsCableScte55d2UsOob287docsCableNdf288docsCableNdr289ptm290ghnService state0Down1UpSOPHOS SFOS-FIREWALL-MIB::haStatus0notapplicable1auxiliary2standAlone3primary4faulty5readySOPHOS SFOS-FIREWALL-MIB::haStatusType0disabled1enabledSOPHOS SFOS-FIREWALL-MIB::serviceStatus0untouched1stopped2initializing3running4exiting5dead6frozen7unregisteredSOPHOS SFOS-FIREWALL-MIB::subscriptionStatusType1trial2unsubscribed3subscribed4expiredzabbix.host.available0not available1available2unknown