SNMP access to pf ALTQ data?

[Daniel Hartmeier]

On Sat, Jul 08, 2006 at 02:18:12AM -0500, J. Buck Caldwell wrote:

> Is it possible to track pf ALTQ usage with MRTG? I notice that FreeBSD's 
> built-in bsnmpd has a module and mibs to support pf, but I know too 
> little about SNMP to figure out how to access the queue stats.
> 
> Specifically, I'm looking to make a series of MRTG graphs that show the 
> total bytes that pass through each queue. I figure if worst comes to 
> worst, I can work out a separate program that parses the output of 
> 'pfctl -vsq' and returns that as MRTG-readable input, but it would be 
> much smoother to get it via SNMP, if it can be done.

Some queue related values are available, take a look at

http://www.freebsd.org/cgi/cvsweb.cgi/src/usr.sbin/bsnmpd/modules/snmp_pf/

especially the BEGEMOT-PF-MIB.txt file.

But pf_snmp.c doesn't use the DIOCGETQSTATS ioctl to fetch those byte
counters you're looking for.

Maybe Philip can add them. One example of how to fetch the queue stats
is pfctl itself, another is pfstat-2.2 pf.c query_queues(), see

http://www.benzedrine.cx/pfstat.html

(make sure to grab pfstat-2.2.tar.gz, older versions didn't fetch queue
stats, either)

It's basically just doing DIOCGETQSTATS after DIOCGETALTQ and reading
the counters, somewhat depending on queue type.

Daniel